IT Security Guru

Penetration testing has been a cornerstone of cybersecurity for decades. For many organisations, it is part of an annual security programme, providing reassurance for boards, evidence for customers and insurers and a demonstration of compliance with regulatory requirements. It is also one of the most commonly purchased cybersecurity services. Despite its widespread use, penetration testing is actually one of the least consistently defined services in the industry.

A new threat intelligence report from WatchGuard is warning organisations worldwide to strengthen behavioural detection capabilities after uncovering an espionage campaign by the Iran-linked threat group MuddyWater that successfully targeted high-value organisations across four continents.

Check Point Software has announced that its Cloud Firewall offering is now available on the AWS European Sovereign Cloud, as the cybersecurity giant becomes an official partner for Amazon’s new independent European cloud infrastructure. The move is designed to help European organisations meet increasingly stringent data residency and operational autonomy requirements under EU regulatory frameworks, without sacrificing the performance and security capabilities they rely on from AWS.

Synthetic media has moved from technical curiosity to mainstream threat in just a few years, with deepfakes now cheap enough to produce that a free app and a handful of seconds of scraped audio can generate convincing fakes. The consequences stretch well beyond political misinformation: corporate fraud running into tens of millions of dollars, biometric security checks being bypassed, and a largely under-reported epidemic of non-consensual intimate imagery.

Cybersecurity vendor Huntress has announced the general availability of Managed Identity Security Posture Management (ISPM), extending its Agentic Security Platform from threat detection into continuous, expert-managed remediation of identity weaknesses across Microsoft 365 environments. The launch is underpinned by figures the company says highlight how central identity has become to modern attack chains.

A lack of continuous validation is preventing organisations from turning cyber visibility into meaningful risk reduction, according to new research from Filigran. The company’s State of Threat Management Report, based on a survey of 550 security decision-makers and practitioners worldwide, found that although organisations are investing heavily in threat intelligence and security tools, many continue to struggle to prioritise the risks that matter most.

Swiss privacy company Proton has launched Lumo 2.0, a major upgrade to its zero-access encrypted AI assistant, as concerns mount over the security risks posed by mainstream AI tools in the enterprise. Unlike most AI assistants, which log user conversations and may use them to train future models, Lumo is built so that not even Proton can read what users type into it.

Keeper Security has announced the availability of the Keeper Teams App, a new integration designed to bring privileged access request and approval workflows directly into Microsoft Teams. Powered by Keeper Secrets Manager (KSM) and Commander Service Mode, the application enables organisations to manage privileged credential access within Teams while maintaining Keeper’s zero-knowledge security model.

The Public Accounts Committee (PAC) published a damning report this week, finding that national museums and galleries across the UK are being left exposed to cyber attacks, physical theft, and financial instability, while the Department for Culture, Media and Sport (DCMS) takes a largely hands-off approach. The report highlights a pattern that will be familiar to the security community: high-profile incidents, promises of lessons learned, and a conspicuous absence of concrete follow-through.

KnowBe4, the human risk management platform, today announced it has been awarded ‘2026 Global Customer Value Leadership’ in the email security industry as part of Frost & Sullivan’s Best Practices recognition. Best Practices awards companies for their superior leadership and innovation.