Cybersecurity

New York – September 28, 2026 -- Noma Security has expanded its AI and agent security platform to cover autonomous agents, MCP servers, and skills running directly on employee laptops, closing what the company calls one of the largest blind spots in enterprise AI security.

Agents on employee machines inherit full user credentials without oversight

Coding agents such as Claude Code, Cursor, Codex, and Windsurf, along with productivity agents like Claude Cowork, already operate on employee devices with the same permissions and credentials as the humans who installed them. MCP servers and skills extend that access into databases, repositories, and internal systems, often chaining actions across a session without requiring approval at each step.

Beachwood, Ohio – September 25, 2026 -- Saber Healthcare Group has disclosed a cybersecurity incident in which an outside party encrypted a portion of its corporate network files on July 27, 2026, potentially exposing personal and medical information tied to an undisclosed number of individuals.

Attacker encrypted files causing service outage on July 27, 2026

Saber detected a service outage affecting internal and external computer systems on that date. The company secured and isolated its systems and launched an investigation with outside cybersecurity experts, who confirmed an unauthorized party had accessed the corporate network and encrypted a small portion of files, triggering the outage.

Burlington, Vt. – September 25, 2026 -- nuHarbor has launched a new Managed Extended Detection and Response (mXDR) offering built on Splunk, targeting state and local government agencies that operate fragmented security stacks across dozens of separately procured tools.

State agencies inherit decades of disconnected security purchases

Most state governments lack a uniform security architecture, with individual agencies procuring their own SIEM, EDR, and identity tools on independent budgets and timelines. This creates visibility gaps between systems that were never designed to interoperate, according to nuHarbor.

Hamburg – September 25, 2026 -- Envision Energy has secured an IEC 62443-3-3 Security Level 2 (SL2) certificate from TÜV SÜD for its wind farm control system, covering SCADA, PPC, PLC and industrial network devices. The certification was announced during WindEnergy Hamburg 2026 and extends independently validated cybersecurity capabilities from individual control components to the full wind farm system level.

Certification covers system-wide security mechanisms across SCADA, PPC and PLC

IEC 62443-3-3 is a globally recognized standard focused on system-level security requirements, assessing how components, networks and security mechanisms function together within an overall control system. The TÜV SÜD certificate provides third-party validation that Envision Energy's wind farm control architecture meets these system-level requirements.

Dallas and Tel Aviv – September 24, 2026 -- Enterprises have working detections for only 63% of the cyber threats they have already identified as relevant, leaving more than a third of known risks operationally uncovered, according to new research from Conifers based on an analysis of 14,652 detections in live enterprise environments.

The report, titled The Detection Blind Spot, found that detection coverage extended to just 64% of the MITRE ATT&CK techniques relevant to each environment studied. Nearly half of all detections examined, 47%, required attention before they could be trusted to function as intended, despite appearing as deployed or healthy in standard inventory-based reporting.

Sunnyvale, Calif. – September 24, 2026 -- Discern Security has launched an integration with Jamf that turns existing device inventory data into visibility on AI and Shadow AI tools running across managed Mac fleets, the companies announced. The integration is available now on the Jamf Marketplace.

Integration requires no new endpoint software

The system uses a read-only API role and the Jamf agent already deployed on managed devices, avoiding additional installations. It draws on Jamf Pro data spanning computers, computer groups, OS X configuration profiles, patch policies, software title configurations, mobile devices, applications, users, LDAP servers, SSO, and webhooks.

Providenciales – – September 24, 2026 -- KuCoin has upgraded its Wallet Management Services from CCSS v8.1 Level 2 to CCSS v8.1 Level 3, the highest tier of the Cryptocurrency Security Standard, the exchange announced.

KuCoin secures full-system certification under the CCSS v8.1 framework

The Level 3 rating, assessed under the same v8.1 standard as the prior certification, verifies stronger controls across the full cryptographic key lifecycle, from generation and storage to access, backup and recovery.

New controls target key-compromise response and personnel access

Compared with Level 2, the Level 3 certification requires greater separation of responsibilities, stricter access and personnel controls, regular testing of key-compromise response procedures, broader independent assurance, and continual backup of operational logs. KuCoin said the measures reduce single points of failure and improve traceability and resilience.

Cambridge, England – September 23, 2026 -- Kigen has become the first company to achieve GSMA eUICC Security Assurance (eSA) certification for an automotive eSIM supporting SGP.32 v1.3, GSMA's latest IoT eSIM specification, giving connected-vehicle manufacturers a standards-current security platform for fleets requiring decade-plus service life.

The certification pairs Kigen's eSIM OS with Infineon's TEGRION SLI22 automotive security controller. It extends Kigen's certified portfolio across the TEGRION SLx22 chip family into three products: Automotive (SLI22), Consumer (SLC22, supporting SGP.22 v2.7), and Industrial IoT (SLM22, supporting SGP.32 v1.3). All three share a common OS, hardware platform, development tools and management stack, letting OEMs apply one security architecture across infotainment, telematics and headless vehicle systems.

New York – September 22, 2026 -- Chainguard has been authorized by the CVE Program as a CVE Numbering Authority (CNA), granting it the power to assign official vulnerability identifiers for qualifying open source flaws surfaced through its Athena coalition.

Chainguard gains authority to assign CVE identifiers for unclaimed open source flaws

The CNA scope covers cases where upstream maintainers have already fixed a flaw without issuing an identifier, where no maintainer remains to assign one, or where no more specific CNA covers the affected project. Chainguard's CVE Records will defer to maintainers and project-specific CNAs wherever they exist.

Atlanta – September 22, 2026 -- Siemba, a continuous offensive security provider, has launched Siemba Pride, a formal global partner program offering deal registration, co-sell support, tiered margins, and white-label delivery on its AI-driven continuous threat exposure management (CTEM) platform.

Three partner pillars target distinct channel roles

Siemba Pride organizes partners into three categories. Enablers are systems integrators that deploy and operationalize the platform inside enterprise environments. Amplifiers cover MSSPs, agencies, resellers, and procurement networks that bring Siemba to new customers through their own channels. Enhancers are ISVs and technology platforms that integrate with Siemba via APIs and co-engineered workflows.