Enterprise Security Tech

A cyberattack that disrupted systems at the Los Angeles County Metropolitan Transportation Authority is now being attributed to Iranian state-backed actors, according to new research that points to a broader escalation in cyber activity targeting U.S. infrastructure. Researchers at Gambit Security say the group behind the March breach, calling itself Ababil of Minab, is likely linked to Iran’s Ministry of Intelligence and State Security. The group had claimed to act independe

Ransomware activity remains stubbornly high in 2026, even as monthly volumes fluctuate, according to new threat intelligence from NCC Group. The firm recorded 748 global ransomware incidents in April, a slight decline from March but still part of a broader trend that shows attackers operating at a higher baseline than last year. That shift reflects something more structural than a temporary spike. The ransomware-as-a-service economy has matured into a repeatable, scalable bus

As enterprises rapidly deploy autonomous AI agents across internal systems, cybersecurity teams are struggling to control how those agents access sensitive corporate data. TrustLogix announced a major expansion of its TrustAI platform aimed at solving that problem with real-time AI governance controls at the data layer. The new release introduces several capabilities designed for enterprise AI security, including a runtime “kill switch” that allows organizations to instantly

Enterprises are entering a new era of certificate management pressure as public TLS certificate lifespans continue to shrink. What was once a 398-day renewal cycle has dropped to 200 days, with further reductions expected. The shift is forcing security and infrastructure teams to rethink how they manage digital certificates at scale or risk outages, compliance failures, and exploitable blind spots. Encryption Consulting is positioning its latest release, CertSecure Manager v3

As enterprises struggle to keep pace with a sharp rise in vulnerabilities uncovered by advanced AI systems, cybersecurity firm ArmorCode is introducing a new approach that reframes how security teams operate in an AI-driven threat landscape. The company announced Anya Agents, a framework of task-specific AI workers designed to integrate directly into enterprise security workflows. Built on its proprietary platform, the release signals a broader shift away from passive AI assi

OpenAI has disclosed that attackers tied to the ongoing TanStack npm supply chain compromise gained access to internal credentials after breaching two employee devices, underscoring how deeply modern software attacks can penetrate development environments without ever touching production systems. The company said the intrusion was part of the broader “Mini Shai-Hulud” campaign, a fast-moving operation targeting npm ecosystems, CI/CD pipelines, and developer tooling. While Ope