SecurityBrief US

There are a number of changing demands facing physical security, with businesses needing to protect increasingly large or complex sites while maintaining coverage around the clock. Pressures include rising security costs, shortages of security personnel, theft and trespassing, and demand for continuous monitoring. Autonomous patrol robots are an emerging technology that can continuously patrol sites and provide information to human security teams.

Eclypsium has published its August InfraTrust Pulse report on infrastructure security advisories, identifying 118 new advisories covering 1,051 CVEs. The monthly analysis found that 40 of those vulnerabilities can be exploited remotely without authentication, while 74 previously issued advisories were revised during the reporting window. The findings highlight growing concern over the management systems used to administer fleets of firewalls, routers and switches.

Yooz has published research showing that payment fraud attempts are now a common risk for finance teams. In the survey, 70% of U.S. finance professionals said their organisation had experienced a payment fraud attempt in the past two years or could not rule one out. The findings are based on a survey of 750 U.S. professionals working in finance, accounting, or accounts payable roles.

Nasuni has acquired DryvIQ, adding data classification and governance technology to its file data platform. The deal brings DryvIQ's tools for discovering, classifying and governing unstructured data into Nasuni's broader platform for managing file data across cloud and on-premises systems.

rf IDEAS and Wavelynx have published a report on authentication modernisation that points to a gap between executives' confidence in their security posture and the progress being made inside organisations. Based on a survey of 500 IT and security leaders at mid-sized to large organisations, the report suggests many businesses believe they are ahead of their peers even as core identity and access systems remain dated.

Decodo has published research ranking 45 AI agents across 10 browsing and task-based functions. No tool achieved a perfect score. Claude for Chrome and Amazon Nova Act shared the top overall score with 18 points out of 20, followed by Fellou and ChatGPT Desktop on 17. The assessment compared vendor documentation with tests of how the tools handled practical tasks such as filling forms, completing purchases, switching tabs and carrying out multi-step work.

GTIA has released a study on how small and midsize businesses are adopting artificial intelligence, based on responses from 520 SMB and microbusiness decision-makers. The findings suggest many smaller companies are taking a cautious approach rather than moving quickly into broad AI deployments. Forty percent of respondents use AI tactically for specific business needs, while 50% were classified as "AI-Invested", meaning they use it for operational functions and some customer-facing applications.

Abnormal AI has expanded its email security platform with Control Centre, Email DLP Rules and upgrades to AI Phishing Coach. The additions extend coverage across inbound email threats, outbound messages and employee training. The move reflects a shift in email risk as attackers use generative AI to create more convincing messages that resemble routine business communications. Abnormal's approach uses behavioural analysis to detect when email activity diverges from an organisation's normal patterns.

Integrity360 has acquired identity security specialist CyberIAM, adding 120 employees and about €18 million in revenue. CyberIAM will become a new identity-focused services practice within Integrity360, expanding the Irish-founded cyber security group's work in identity and access management. The company operates from Chester, London and Cape Town, serving customers in financial services, retail, healthcare, insurance, energy, legal and the public sector.

Bitdefender has warned that school-related scams seen in the United States are also affecting families across Asia-Pacific, using education costs and digital study tools as bait. Researchers at Bitdefender Labs identified SMS and email campaigns aimed at students, parents and teachers. The messages promote fake education grants, scholarships, free laptops, discounted artificial intelligence subscriptions and false delivery notifications.