Latest cybersecurity reporting from selected sources.

Hitesh Sheth: Cloud, SaaS, Data Center Visibility Boosts Enterprise Risk AssessmentVectra AI CEO Hitesh Sheth says comprehensive network observability provides the most reliable foundation for predictive cybersecurity because it spans cloud, SaaS and on-premises infrastructure while offering telemetry that attackers are far less able to manipulate than endpoint logs.

Sophos looked at a week of its own endpoint data and found that AI coding agents such as Claude Code, Cursor, and OpenAI Codex are setting off detection rules written to catch human intruders

Threat actors don't need any special authentication to reach a target endpoint — they just need to know where it is.

Threat actors are continuing to exploit a critical Langflow vulnerability as part of fresh attacks designed to deliver a Monero cryptocurrency miner

Startup Analyzes Endpoint Behavior to Stop Incidents Before Security Teams RespondEndpoint security startup Ent emerged from stealth with a $100 million seed round led by Decibel, betting that intent-aware AI running on endpoints can prevent increasingly automated AI-driven attacks before traditional detection and response tools have time to react.

Series A Funding Supports Visibility Across Cloud, Code and Endpoint EnvironmentsGeordie AI, the 2026 RSAC Innovation Sandbox winner, raised $30 million in Series A funding to expand a platform that provides visibility, governance and behavioral monitoring for AI agents operating across cloud, code and endpoint environments as enterprises accelerate autonomous AI adoption.

Frontier AI Models Accelerate Tasks Once Measured in Months to Weeks or DaysSentinelOne will cut about 240 employees, citing productivity gains from frontier AI models that have dramatically accelerated internal workflows, while redirecting savings into AI security, cloud, data and endpoint initiatives to drive long-term growth and profitability.

Python scripts were used to test malware against endpoint detection and response agents from Sophos, CrowdStrike, and Windows Defender.

A threat actor is using an AI-built ransomware attack toolkit that automates Active Directory discovery and helps evade endpoint detection and response (EDR) solutions. [...]

Security vendors have spent years building up defenses around the endpoint, but one researcher says AI coding tools have brought the walls down.

New Startup Says Cloud-Heavy Models Do Not Scale for Large EnterprisesBold Security exited stealth with $40 million to build an endpoint platform for the artificial intelligence era. CEO Nati Hazut said companies can no longer rely on older controls as employees and AI agents access data locally, creating new blind spots around apps, files and device activity.

The browser is becoming the operating system for modern work, yet many enterprises still treat it as an extension of network or endpoint security. Keep Aware's 2026 State of Browser Security Report shows 41% of employees used AI web tools while browser-based phishing, extensions, and social engineering drive new security blind spots. [...]

Forward Edge-AI's new Isidore Quantum is a compact, low-power hardware device designed to defend sensitive operational technology endpoints against future quantum attacks.

New research has found that Google Cloud API keys, typically designated as project identifiers for billing purposes, could be abused to authenticate to sensitive Gemini endpoints and access private data

$300M Acquisition Strengthens Palo Alto Networks' XDR and AI Governance PlatformPalo Alto Networks plans to acquire Koi Security for $300 million to address growing AI-driven endpoint risks. The startup's technology adds deep visibility into AI agents plug-ins and nonbinary code, enhancing Cortex XDR and Prisma AIRS as enterprises confront a growing unmanaged AI attack surface.

A malicious campaign is actively targeting exposed LLM (Large Language Model) service endpoints to commercialize unauthorized access to AI infrastructure. [...]

More Than 91,000 Attacks Target Exposed LLM Endpoints in Coordinated CampaignsTwo coordinated campaigns generated more than 91,000 attack sessions against AI infrastructure between October and January, with threat actors probing more than 70 model endpoints from OpenAI, Anthropic and Google to build target lists for future exploitation.

A total of 91,403 sessions targeted public LLM endpoints to find leaks in organizations' use of AI and map an expanding attack surface.

Deal Represents Return to Tuck-In M&A for Palo After 3 Multi-Billion Dollar DealsPalo Alto Networks is in talks to buy Washington D.C-based endpoint security startup Koi for $400 million. Koi is focused on securing extensions, AI models, code packages and containers, and its differentiation lies in mapping, assessing risk and govern the software landscape at enterprise scale.

A campaign has been observed targeting Palo Alto GlobalProtect portals with login attempts and launching scanning activity against SonicWall SonicOS API endpoints. [...]