Author: Staff Writer

Essential Insights Significant Funding Milestone: Torq has raised $140 million in Series D funding, increasing its valuation to $1.2 billion and total funding to $332 million, showcasing strong market confidence in AI-driven security solutions. Strategic Investor Support: The funding round was led by Merlin Ventures and supported by key existing investors, reinforcing Torq’s vision to revolutionize Security Operations Centers (SOCs) through autonomous, AI-enhanced processes. Accelerated AI Adoption: With the new capital, Torq aims to enhance its AI SOC Platform, focusing on hyperautomation and rapid deployment, allowing organizations to automate complex security tasks more efficiently. Expansion and Growth: Torq is aggressively…

Leadership Recognition: Microsoft has been named a leader in the 2025-2026 IDC MarketScape for Worldwide Unified AI Governance Platforms, emphasizing its commitment to safe and responsible AI innovation. Unified AI Governance Urgency: Stricter regulations and the complexities of managing AI across various environments make a unified governance strategy essential for reducing compliance risks and enhancing transparency. Robust AI Governance Tools: Microsoft offers integrated capabilities for observability, management, and security, providing organizations with features like fairness analysis, safety guardrails, and automated compliance tools. Comprehensive Security Framework: Microsoft’s AI governance is supported by deep security integrations, ensuring real-time protection against threats, automated…

Fast Facts Guilty Plea: Nicholas Moore, a 24-year-old from Tennessee, pleaded guilty to hacking the U.S. Supreme Court’s filing system over 25 times and accessing sensitive records from AmeriCorps and Veterans Affairs. Hacking Details: Moore used stolen credentials to breach the Supreme Court’s system and disclosed personal information on an Instagram account named “@ihackedthegovernment.” Legal Consequences: He faces a maximum of one year in prison for a misdemeanor count of computer fraud, with sentencing set for April 17. Security Breaches: In addition to the Supreme Court, Moore illegally accessed records from AmeriCorps and a VA veteran’s account, publicly sharing the…

Top Highlights AI-enhanced malware advances rapidly, evading detection and enabling faster lateral movement, challenging traditional security measures. Shift in security strategy emphasizes reducing endpoint attack surfaces through a “default-deny” Zero Trust approach, rather than solely relying on detection. AppGuard’s approach uses fewer rules and auto-adapts to endpoint changes and malware techniques, offering more effective, frictionless protection without heavy detection reliance. Industry validation demonstrates AppGuard’s real-world efficacy—in one case, a major airline experienced zero malware breaches after implementation, showcasing practical impact. The Issue The recent cybersecurity profile by AppGuard highlights a surge in AI-enhanced malware, which complicates detection and enables faster…

Quick Takeaways Launch of Advanced Security Enclosure: Cloudastructure, Inc. introduces a powered security enclosure for AI-driven video surveillance, enhancing monitoring for high-risk environments. Expansion with Established Client: The company’s first commercial sale involves deploying the enclosure at four sites for a national construction firm, showcasing a significant partnership growth. Enhanced Surveillance Capabilities: The enclosure offers continuous monitoring, real-time threat detection, and eliminates costly traditional security infrastructure requirements. Scalable Security Solutions: Cloudastructure’s innovation allows for rapid deployment of intelligent security across difficult-to-access sites, reinforcing its reputation in risk management and operational confidence. Revolutionizing Security Solutions Cloudastructure, Inc. has recently introduced an…

Summary Points A 40-year-old Jordanian, Feras Khalil Ahmad Albashiti, pleaded guilty to operating as an access broker, selling access to at least 50 company networks by exploiting firewall vulnerabilities in 2023. Albashiti sold malware capable of disabling endpoint security and escalating internal user privileges, which he demonstrated by using it on an FBI server during the investigation. He was linked to cybercriminal activities, including intrusions into government systems and a ransomware attack causing over $50 million in damages. Arrested in July 2024, Albashiti faces up to 10 years in prison and a $250,000 fine, with sentencing scheduled for May. Underlying…

Essential Insights Critical Vulnerability Disclosure: Fortinet revealed a severe vulnerability (CVE-2025-64155) in its FortiSIEM platform, scoring 9.4 on the CVSS scale, allowing unauthenticated attackers remote code execution via crafted TCP requests. Exploitation in the Wild: Cybersecurity vendor Defused reported active exploitation of this vulnerability shortly after its disclosure, with notable activity traced back to multiple IP addresses, including those from Chinese providers. Widespread Attention: The flaw has attracted substantial interest from diverse threat actors, indicating increased exploitation rates compared to similar vulnerabilities, as highlighted by Defused’s analysis. Urgent Mitigation Recommended: Fortinet advised customers using vulnerable FortiSIEM versions (6.7 to 7.4)…

Top Highlights Increased Cybersecurity Spending: 80% of hedge funds and investment firms ramped up cybersecurity budgets for 2025, as reported by the Hedge Fund Association and SeaGlass Technology. Breach Experience: Approximately 50% of these firms reported experiencing a cybersecurity breach in the past year. Top Threat: Phishing: Two-thirds of surveyed firms identified phishing as their primary security concern. Future Investments: Firms plan to enhance resilience with increased spending focused on incident response, threat detection, and cloud security over the next 12 to 24 months. Increased Spending Reflects Growing Threats In 2025, eight out of ten hedge funds and investment firms…

Fast Facts Exploitation Alert: A critical vulnerability in Fortinet FortiSIEM (CVE-2025-64155) is actively being exploited by threat groups, shortly after a proof of concept was released. Unauthorized Command Execution: The flaw allows attackers to execute unauthorized commands on the system due to improper neutralization of special elements. Multiple Vulnerabilities: This is the latest in a series of vulnerabilities linked to FortiSIEM’s phMonitor, following previous issues tracked as CVE-2023-34992 and CVE-2024-23108. Insufficient Remediation: Despite Fortinet’s efforts to address these vulnerabilities, experts indicate that their measures have focused too narrowly on directly affected components, leaving adjacent attack surfaces vulnerable. Urgent Response to…

Top Highlights Elevated Role of CISOs: Businesses are increasingly recognizing the critical importance of cybersecurity, leading to a rise in executive CISO titles, surpassing VP and director levels for the first time. Regulatory Compliance: The shift to executive CISO designations is driven by growing regulatory demands, necessitating leaders who can navigate both technical and compliance landscapes effectively. Burnout Challenges: Despite the elevated status, CISOs face substantial burnout due to overwhelming responsibilities, highlighting the need for organizational support and resources. Strategic Influence: Holding a C-level title enhances a CISO’s ability to influence security discussions at the executive level, underscoring the increasing…