Agentic remediation automates the mobilization phase of CTEM to eliminate vulnerability backlogs and achieve Shift Zero by enabling autonomous, low-risk fixes under human supervision.
Artifact management firm Cloudsmith has raised $72 million in a Series C round led by TCV, bringing its total funding to $124 million as it expands its secure software supply chain platform.
McLean, VA-based startup Rilian has closed $17.5 million in combined seed and seed extension funding to expand its agentic security orchestration platform, Caspian, targeting government, critical infrastructure, and law enforcement customers.
The Supreme Court is hearing oral arguments in Chatrie v. The United States, the first major Fourth Amendment digital privacy case since 2018, centering on whether geofence warrants violate constitutional protections against unreasonable searches.
A newly identified ransomware operation called Kyber is striking Windows servers and VMware ESXi hosts, with one variant deploying Kyber1024 post-quantum key protection. Rapid7 analyzed two distinct variants in March 2026 during an active incident response engagement.
A Mirai-based botnet campaign is actively exploiting CVE-2025-29635, a high-severity command-injection flaw in D-Link DIR-823X routers, more than a year after the vulnerability was first disclosed. The affected routers reached end of life in November 2024, making a vendor patch unlikely.
House Republicans introduced the Secure Data Act on Wednesday, a comprehensive federal privacy bill giving consumers opt-out rights over targeted advertising and data sales while drawing swift criticism from Democrats and advocacy groups.
Sean Plankey formally asked President Trump to pull his nomination to lead CISA, citing Senate gridlock after more than a year without confirmation. The agency continues to operate under acting leadership amid deep budget cuts and ongoing personnel instability.
Incident responders at Expel have exposed a North Korean state-linked operation that drained over $12 million in cryptocurrency from 26,584 wallets using fake job offers and multi-strain malware.
Apple pushed out-of-band security updates on April 22, 2026, to address CVE-2026-28950, a Notification Services bug that allowed deleted notifications to persist on iPhone and iPad devices.