IT Security Guru

Nearly half (49.8%) of organisations have confirmed or suspected that an AI agent took an unintended, unexpected or unauthorised action in the past year, according to new research from Salt Security. The findings, published in the company’s State of Agentic AI and API Security 2H 2026 report, highlight growing concerns around the security of autonomous AI systems as enterprises increasingly integrate agents into everyday operations.

Vega, the pioneer of Agentic Cyber Defense, today announced the appointment of Scott Simkin as Chief Marketing Officer. Simkin joins as Vega II unleashes the best model trained for cyber defense to transform every alert, across all data sources, into a conclusive verdict at the speed of the attack. The platform keeps every lesson and gets faster with every fight, so defenders can finally outpace adversarial AI. “Once a generation, a company changes how security gets done.

Huntress researchers have uncovered an SEO-poisoning campaign that harvests SSL VPN credentials through a lookalike WatchGuard download page, then hands victims the real, validly signed installer from WatchGuard’s own CDN, leaving endpoint tools with nothing to detect. The activity, detailed by the Huntress SOC on 13 October, centres on watchguard-vpn[.]net, a lookalike domain posing as a download page for WatchGuard’s Mobile VPN with SSL client.

Zero trust has become one of the most overused terms in security marketing, often applied to products that simply add another layer of network segmentation. This piece looks at what zero trust actually specifies according to its foundational standard, the implementation order that works in practice, and why identity is the dependency most organizations underestimate. What Does Zero Trust Actually Specify, Beyond the Marketing Language?

Certes has received Frost & Sullivan’s 2026 Global Enabling Technology Leadership Recognition in post-quantum cryptography (PQC), following an independent evaluation of vendors in the market.

Check Point Research has disclosed two high-risk vulnerabilities in LiteLLM, the open-source gateway that sits between enterprise applications and AI providers such as OpenAI, Anthropic and Google. The flaws could allow a user with minimal privileges to take full control of the gateway, read sensitive files, execute arbitrary code and harvest the API keys an organisation uses to access its AI providers. LiteLLM is downloaded around 97 million times a month and has more than 59,000 stars on GitHub.

A coordinated attack on the operational technology (OT) behind supermarket refrigeration has hit hundreds of stores across France, in what security experts are calling one of the clearest examples yet of cyber sabotage with physical consequences. Retailers confirmed the attack on Monday 12 October, with disruption reportedly beginning on Sunday night.

By Louise John, Head of IT Service Delivery at Virgin Active For IT managers, unexpected projects and changing business priorities are normal part of the job. You might have spent months planning your team’s workload, but only to be told with little warning that a new software solution needs to be implemented within six weeks.

Ahead of their participation at DTX + UCX London 2026, Lee Robson, AWS Greenfield Practice Lead at Ingram Micro shares what the company will be showcasing at the event and explains what trends will impact the channel in the year ahead. How is Ingram Micro participating in DTX + UCX 2026? Ingram Micro will be showcasing how organisations can accelerate innovation with AWS.

Attackers are exploiting two newly disclosed vulnerabilities in AhsayCBS, the management console for Ahsay’s cloud backup software, to take over servers and quietly run cryptocurrency miners, according to researchers at Huntress. AhsayCBS (Cloud Backup Server) is mainly used by managed service providers (MSPs) and system integrators to create users and manage backup policies for their clients. As of 8 October, Huntress had seen five organisations targeted via the flaws.