New
Which security investments are you prioritising for FY27?
Identity, cloud security posture, AI security, SOC automation, resilience? Share your top two and why.
Topic hub
Security
Evaluating Security this quarter? This page brings together what changed, which companies are most active, what practitioners are asking and how to build a shortlist.
Threat research, identity, network and cloud security, and the new attack surface created by AI tools and agents.
What changed recently
Start with the news. These are the Security stories getting the most attention right now, so you know what has shifted before you talk to anyone.
Security
September 2026 Cyber Threat Landscape: Global Attacks Jump 48% as Phishing and GenAI Data Exposure Rise
Key takeaways Organizations experienced 2,803 weekly cyber attacks on average in September, up 16% month over month and 48% year over year. Education remained the most targeted sector, averaging 6,656 weekly attacks per organization, a 59% year-over-year increase. Europe recorded the sharpest regional rise at 61% year over year, while Latin America faced the highest volume at 3,813 weekly attacks…
SecurityWhy it matters
Threat Actors Use Google Ads To Target Ledger Users
In August 2026, Zscaler ThreatLabz analyzed a phishing campaign that used fraudulent Google ads to target Ledger hardware wallet users. The ads redirected users through Google Cloud Storage and Vercel to a Google Sites page containing a phishing page impersonating Ledger in an iframe. During our analysis, the Vercel redirect appeared to change every 15-20 minutes. There, a fake…
Security
2026 Birthday week: network performance update
Cloudflare now ranks as the fastest provider across 74% of the top 1,000 global networks. By incorporating background telemetry from Cloudflare Challenge Pages, we have expanded our real-user measurement scale while maintaining user privacy.
Security
Using AI to chart a course for our post-quantum migration
We’re building CryptoLabe, an internal AI-powered tool that discovers cryptography across our codebase, surfaces dependencies, and helps us progress toward a full post-quantum migration by 2029. Here’s what we’ve learned so far.
Security
Announcing Cloudflare OHTTP Gateway: expanding access to Cloudflare’s privacy-preserving infrastructure
We’re announcing the closed beta of a self-serve Cloudflare OHTTP Gateway. We’re also renaming our Privacy Gateway to Cloudflare OHTTP Relay to better distinguish the two products.
Security
Protected Quick Tunnels: simple accountless authentication for your next dev project
Quick Tunnels now support email authentication. Add --allowed-mail to one cloudflared command, and only the addresses or domains you list can reach your local app. No Cloudflare account required on either side.
Security
Bridging technical depth and usability: The story behind Radar’s redesign
We redesigned Cloudflare Radar to make real-time global traffic and outage data accessible to a wider audience, including journalists, less technical researchers, and everyday users. By introducing an interactive map and standardized components, we simplified navigation while preserving technical depth.
SecurityCase study
Inside the Exchange Inspector: How Tenable uses OpenAI GPT cyber models to review open-source AI agents
Community-built AI agents, skills, and MCP servers are landing in SOC workflows fast. Here’s what the Exchange Inspector tests before a listing earns its vetted tag on the CyberAgents Exchange. Three tools have already passed. Key takeaways Every Inspector-vetted listing clears three gates: an automated check, a frontier model assessment, and human verification. Tenable uses Tenable One AI…
Companies to know in Security
Those stories keep returning to the same names. These are the companies we track in this category; each profile has its news, solutions and published reviews.
Palo Alto Networks
Santa Clara, California, USA
Palo Alto Networks is a cybersecurity company offering network security, cloud security and security operations platforms. Its portfolio includes next-generation firewalls and Strata network security, Prisma SASE and Prisma Cloud, Cortex XSIAM, XDR and Cortex Cloud, and Unit 42 threat intelligence and incident response. Founded in 2005 by Nir Zuk, it is headquartered in Santa Clara, California, and listed on Nasdaq.
CrowdStrike
Austin, Texas, USA
CrowdStrike is an American cybersecurity company founded in 2011 by George Kurtz, Dmitri Alperovitch and Gregg Marston, and headquartered in Austin, Texas. Its cloud-native Falcon platform uses a single lightweight agent to provide endpoint protection, extended detection and response, identity protection, cloud security, next-gen SIEM and threat intelligence, with managed services. CrowdStrike is listed on Nasdaq (CRWD).
Microsoft
Redmond, Washington, USA
Microsoft is a global technology company whose enterprise portfolio spans the Azure cloud platform, Microsoft 365 productivity software, Dynamics 365 business applications, security products and developer tools such as GitHub. Founded in 1975 and headquartered in Redmond, Washington, Microsoft is one of the largest providers of cloud and AI services to businesses.
Fortinet
Sunnyvale, California, USA
Fortinet is a US cybersecurity company known for its FortiGate next-generation firewalls, built on its FortiOS operating system and custom security processors. Its Fortinet Security Fabric spans secure networking, SD-WAN, SASE, switching, wireless, endpoint and security operations. Founded in 2000 by Ken Xie and Michael Xie and headquartered in Sunnyvale, California, Fortinet is listed on Nasdaq.
Zscaler
San Jose, California, USA
Zscaler is a US cloud security company founded in 2007 by Jay Chaudhry and K. Kailash and headquartered in San Jose, California. Its Zero Trust Exchange platform delivers secure access to the internet, SaaS and private applications, including Zscaler Internet Access (ZIA), Zscaler Private Access (ZPA) and Zscaler Digital Experience (ZDX). Zscaler is listed on Nasdaq.
Cisco
San Jose, California, USA
Cisco is a US networking and security company founded in 1984 and headquartered in San Jose, California. It sells enterprise, data centre and service provider networking (Catalyst, Nexus, Meraki, Silicon One), security products including firewalls and Cisco Security Cloud, Splunk observability and security analytics, and Webex collaboration. It completed its acquisition of Splunk in 2024.
Check Point Software
Tel Aviv, Israel
Check Point Software Technologies is an Israeli cybersecurity company founded in 1993 and headquartered in Tel Aviv. It sells network firewalls and the Quantum security gateway family, CloudGuard cloud security, Harmony workspace and email security, and the Infinity platform for unified management and threat prevention, serving enterprises, governments and service providers. It is listed on Nasdaq.
Okta
San Francisco, California, USA
Okta is an identity and access management company that provides cloud-based single sign-on, multi-factor authentication, lifecycle management and identity governance for workforces, and customer identity through Auth0. It serves enterprises, public sector organisations and developers securing access to applications and AI agents. Founded in 2009 by Todd McKinnon and Frederic Kerrest, Okta is headquartered in San Francisco and listed on Nasdaq.
SentinelOne
Mountain View, California, USA
SentinelOne is a US cybersecurity company headquartered in Mountain View, California, founded in 2013. Its Singularity Platform provides AI-driven endpoint protection, extended detection and response (XDR), cloud security, identity threat detection and AI SIEM, with Purple AI as a generative AI security analyst. SentinelOne serves enterprises and governments and is listed on the New York Stock Exchange.
Cloudflare
San Francisco, California, USA
Cloudflare is a US connectivity cloud company founded in 2009 and headquartered in San Francisco. It operates a global network providing CDN, DNS, DDoS protection, web application firewall, Zero Trust access and SASE services, and a developer platform including Workers serverless compute, R2 storage and Workers AI. Cloudflare has been listed on the New York Stock Exchange since 2019.
Wiz
New York City, New York, USA
Wiz is a cloud security company founded in 2020 by Assaf Rappaport, Ami Luttwak, Yinon Costica and Roy Reznik, headquartered in New York City with research and development in Israel. Its cloud-native application protection platform (CNAPP) covers cloud posture, vulnerabilities, identities, code and runtime threats using agentless scanning. Google completed its $32 billion acquisition of Wiz in March 2026, and Wiz is now part of Google Cloud.
Netskope
Santa Clara, California, USA
Netskope is a cybersecurity company that provides cloud-delivered Security Service Edge (SSE) and SASE through its Netskope One platform, combining secure web gateway, CASB, zero trust network access, data loss prevention, firewall and SD-WAN capabilities on its NewEdge private network. Founded in 2012 and headquartered in Santa Clara, California, Netskope listed on Nasdaq in 2025.
Proofpoint
Sunnyvale, California, USA
Proofpoint is a cybersecurity company headquartered in Sunnyvale, California, founded in 2002. It focuses on human-centric security, with products for email security, security awareness training, data loss prevention, insider threat management, identity threat defence and information archiving. Proofpoint was taken private by Thoma Bravo in 2021 and serves enterprises and government organisations worldwide.
Rapid7
Boston, Massachusetts, USA
Rapid7 is a US cybersecurity company headquartered in Boston, Massachusetts, founded in 2000. It sells the Command Platform for exposure management and threat detection and response, including InsightVM vulnerability management, InsightIDR SIEM/XDR, cloud security and managed detection and response services. Rapid7 also maintains the Metasploit penetration testing framework and is listed on Nasdaq.
Tenable
Columbia, Maryland, USA
Tenable is a US cybersecurity company founded in 2002 and headquartered in Columbia, Maryland. It is known for the Nessus vulnerability scanner and sells exposure management products, including the Tenable One platform, Tenable Vulnerability Management, Tenable Cloud Security, Tenable Identity Exposure and Tenable OT Security. Tenable is listed on Nasdaq and serves enterprises and government agencies.
Qualys
Foster City, California, USA
Qualys is a cloud-based cybersecurity and compliance company headquartered in Foster City, California, founded in 1999. Its Qualys Cloud Platform provides vulnerability management (VMDR), asset inventory, patch management, cloud security (TotalCloud), web application scanning, policy compliance and risk management through its Enterprise TruRisk Platform. Qualys is listed on Nasdaq.
CyberArk
Newton, Massachusetts, USA
CyberArk is an identity security company founded in Israel in 1999 by Udi Mokady and Alon N. Cohen, with headquarters in Newton, Massachusetts, and Petah Tikva, Israel. Its Identity Security Platform spans privileged access management, secrets management, machine identity security, endpoint privilege management and workforce identity. Palo Alto Networks completed its acquisition of CyberArk in 2026, and CyberArk was delisted from Nasdaq.
TrendAI
Tokyo, Japan
TrendAI is the enterprise cybersecurity business of Japan's Trend Micro Incorporated, which renamed the business from Trend Micro to TrendAI in March 2026. It sells the TrendAI Vision One platform, covering endpoint, cloud, network and email security, XDR and attack surface risk management. Its parent company, founded in 1988 and headquartered in Tokyo, is listed on the Tokyo Stock Exchange.
Sophos
Abingdon, Oxfordshire, England, UK
Sophos is a British cybersecurity company founded in 1985 and headquartered in Abingdon, Oxfordshire. It sells endpoint protection (Intercept X), firewalls, managed detection and response (MDR), and email and cloud security, managed through the Sophos Central platform, largely via channel partners to mid-sized organisations. Sophos has been owned by Thoma Bravo since 2020 and acquired Secureworks in 2025.
Darktrace
Cambridge, England, United Kingdom
Darktrace is a British cybersecurity company founded in 2013 and headquartered in Cambridge, England. It uses self-learning AI that models normal behaviour in each organisation to detect and respond to threats across networks, email, cloud, endpoints, identities and operational technology. Darktrace was listed on the London Stock Exchange from 2021 until private equity firm Thoma Bravo completed its acquisition in 2024.
What practitioners are asking
Vendor news only tells you half of it. This is what people working in Security are discussing and asking each other.
New
How are you securing employee use of generative AI tools?
Blocking, allow-listing, DLP, enterprise licences, policy and training: what combination is working in practice?
Build a shortlist
With the news, the companies and the open questions in view, the evaluation guide takes you through criteria and trade-offs to a shortlist you can defend.
More Security stories
If you want more background, here is more of the recent coverage.
Security
Solving the Continuous Authorization Conundrum
Security
The real risk of asking AI for financial advice isn’t ignorance. It’s compliance.
TrendLife tested on multiple AI assistants to see how they work when giving financial advice. See what we find out & risks to watch out for: The post The real risk of asking AI for financial advice isn’t ignorance. It’s compliance. appeared first on TrendLife Blog .
Security
Vidar Adds Virtual Machine and Custom Stream Ciphers For String Obfuscation
Vidar is an information stealer that was first observed in 2018. Across its iterations, Vidar has continued to improve its string obfuscation to make detection and analysis more difficult by changing deobfuscation algorithms, constants, and primitives. From May through early September 2026, Zscaler ThreatLabz tracked Vidar’s string obfuscation as it evolved from basic XOR to ChaCha20,…
Security
Four compliance frameworks, one security team: Why fragmented university security raises regulatory risk
In Part 1 of this series, we looked at the security challenges created by fragmented, campus-by-campus environments. Higher education also faces a second pressure that makes that fragmentation harder to sustain: overlapping compliance obligations across FERPA, GLBA, HIPAA, and CMMC. Each framework brings different requirements, reporting timelines, and consequences for failure. Managing them…
Security
Building an evidence-grounded agentic security operations harness on Cloudflare
Cloudflare Managed Defense uses a team of specialized AI agents built on Workers and global network telemetry to analyze security alerts. By separating deterministic evidence collection from model inference, the system delivers grounded recommendations to Managed Defense Analysts.
Security
How the Wiz Red Agent caught a Fortune 500 firm’s data exposure (that other tools missed)
Traditional DSPM and classification tools scan from the inside out. Thinking like an attacker, the Red Agent found a public page exposing sensitive data in minutes.
Security
Cloudflare Impact reaches $100 million in donations
This week, Cloudflare's Impact programs will reach $100 million in donated services. This milestone means that thousands of entities including journalists, civil society, state and local governments, election management bodies, and public schools are being protected from cyberattacks.
Security
CVE-2026-21589: Critical unauthenticated arbitrary file access in Atlassian products
Overview On October 5, 2026, Atlassian published a security advisory for CVE-2026-21589 , a critical arbitrary file access vulnerability affecting eight products: Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data Center, Crowd Data Center, Crucible, and Fisheye. Atlassian assigned the vulnerability a CVSSv4 score of 9.3 . An…
Security
The ASOS Incident: When Attackers Use the Channels Customers Trust
This week, ASOS customers opened their phones to find a hostile push notification delivered through the retailer’s own app. The message claimed the company’s Snowflake environment had been compromised and directed ASOS to engage with the sender through Telegram. ASOS later confirmed to Sky News that an unauthorized customer notification had been sent and said it was investigating activity…
Security
How replying to a recruiting text turns into a request for your money
Got a text message about a job offer at Amazon? Watch out. It might be a scam! See how the job scam works and how to stay protected. The post How replying to a recruiting text turns into a request for your money appeared first on TrendLife Blog .
Security
CrowdStrike Named a Leader in the 2026 IDC MarketScape for Worldwide Modern Endpoint Security for Enterprises Vendor Assessment
Security
Unknown Threat Actor Uses AI-Driven ARTEX to Target South Korean Finance
Security
CISA’s 17 Common Active Directory Compromise Techniques: A Sophos MDR Perspective
Active Directory defenses must combine identity fundamentals, telemetry, and rapid response as attackers reach the environment’s first breach attempt within a median of 11 hours.
Security
The keys to the Internet change on October 11. Are you ready?
On October 11, 2026, the DNS root switches to a new key-signing key (KSK-2024). Learn what this means for you, and how RFC 8509 trust anchor sentinels allow you to test whether your DNS resolver is ready for the rollover.
SecurityHow-to
How to mitigate the risk from AI-generated apps built by your 'citizen coder' employees
AI tools let non-technical employees build workplace apps in minutes with natural language prompts. While these AI-generated apps boost productivity, they can create severe security and data risks. As Cybersecurity Awareness Month kicks off, we’re sharing how Tenable adopted a structured governance framework that allows our “citizen coders” to build secure and compliant apps with AI. Key…
Security
Securing Agent-to-Agent Communication: The Next Identity Frontier
As organizations deploy autonomous AI agents, security teams face a significant shift as non-human non-human entities making decisions, invoking tools, and delegating tasks to other agents without human intervention. Security architectures built around human users, static APIs, and distinct endpoints break down when AI agents dynamically collaborate across an environment. As these interactions…