Leaseweb today announced the appointment of Jan Willem des Tombe as its new Global Strategic Relations Director, reinforcing its strategic ambition to accelerate growth and strengthen its position in the hybrid cloud and sovereign infrastructure landscape. Des Tombe will focus on developing and strengthening Leaseweb’s global market narrative, increasing industry visibility and recognition, and supporting strategic growth initiatives across marketing, communications, sales, partnerships, and M&A.
With over two decades of experience in the TMT, SaaS, IT Managed Services, Cloud, Workspace, and E-commerce sectors, des Tombe brings extensive leadership expertise in scaling businesses, developing commercial strategy, and guiding organizations through transformation. He has previously worked with organizations including Reckitt Benckiser, Tripolis Solutions (now Spotler), and KPN Interned Services, and founded and chaired public-private industry platforms DHPA (now Dutch Cloud Community) and DINL.
Hisense, a leading brand in global consumer electronics and home appliances, showcases a full-scenario smart home ecosystem at CES 2026, demonstrating how advanced display technologies and AI-powered home appliances come together to enhance everyday life.
Designed around real-life home scenarios, Hisense’s CES booth brings premium large-screen entertainment together with intelligent kitchen, air and laundry solutions. Large-screen TVs anchor shared family moments, while AI-enabled appliances demonstrate how technology integrates seamlessly into everyday living. Also making its debut is the Humanoid Service Robot Harley. With 31 degrees of freedom, Harley delivers lifelike gestures and interactions to boost engaging and enhancing on-site experiences. Alongside this, the humanoid robot R1 (A2) and the home companion robot Beta are also on display.
In displays, Hisense highlights RGB Mini-LED evo, a true system-level evolution in large-screen TV technology, led by the debut of the 116UXS RGB Mini-LED TV, the first product powered by this tech. RGB Mini-LED evo introduces an industry-first Sky Blue-Cyan fourth LED into the backlight, expanding colour coverage to up to 110% of BT.2020 while delivering more natural colour expression and improved viewing comfort through genuine system-level evolution.
Hisense also globally debuts the Laser Projector XR10, delivering 6,000 ANSI lumens to create a professional-grade home cinema experience. Designed for immersive viewing up to 300 inches, XR10 brings enhanced brightness and rich colour performance to dedicated home theatre environments. Together with RGB Mini-LED TVs, TriChroma Laser extends Hisense’s large-screen display offering from premium living-room viewing to dedicated home cinema environments.
Building on the evolution of the VIDAA OS, Hisense announced a strategic collaboration with Microsoft to integrate Copilot’s generative AI capabilities into V homeOS, advancing next-generation TV experiences for large-screen home environments. The collaboration also extends to Xbox cloud gaming, bringing world-class game titles directly to Hisense TVs — no console required.
Hisense is dedicated to enhancing everyday life with a range of AI-powered home appliances. The PUREFLAT SMART SERIESrefrigerator features an integrated large smart display with a built-in ConnectLife Hub, delivering a modern, connected kitchen experience by streamlining appliance interaction and smart home control. Meanwhile, the Red Dot Award-winning Air Conditioner Air Master features a high-precision sensing system that can adjust airflow, temperature and humidity for optimal indoor comfort. Its intelligence is further supported by a smart voice assistant and an automatic energy-saving mode.
Hisense’s presence at CES 2026 is further underscored by four CES Innovation Awards. Among the winners, 163 MX has received the CES 2026 Best of Innovation Award in its respective field, recognizing Hisense’s leadership across display and home appliance categories.
Through “Innovating a Brighter Life,” Hisense continues to demonstrate how human-centred innovation can transform advanced technology into more comfortable, connected and meaningful home experiences.
Forcepoint today announced Eva Klein has joined the company as Chief Customer Officer. Klein will lead Forcepoint’s global customer success organization, overseeing onboarding, adoption, retention and long-term value realization as customers operationalize data security in the AI era. She reports to Rick Hanson, President of Go-to-Market.
As sensitive data moves across cloud platforms, SaaS applications, endpoints and AI-driven workflows, organizations face mounting pressure to turn security investment into measurable outcomes. Agentic AI and the rapid growth of synthetic data are accelerating how data is created, shared and reused, often beyond traditional controls. Visibility alone is not enough; customers need confidence that insight leads to action and that protections adapt as risk and regulatory demands change for enterprises and governments.
Forcepoint’s AI-native Data Security Cloud helps organizations identify sensitive data in context, understand how it is accessed and shared and adapt protection in real-time through a unified, single-policy framework. The platform is built to close the visibility-to-control gap facing organizations as they scale AI adoption to support back-office processes, infrastructure management, vibe coding and beyond.
With more than 25 years of experience spanning customer success, partner enablement and sales, Klein will focus on strengthening the customer journey as a continuous loop of ‘always-on’ operational excellence. Most recently, she served as Vice President of Global Customer Success at Mimecast, where she led global teams focused on customer retention, value delivery and operational scale. Prior to Mimecast, she held senior customer leadership roles including Vice President of Customer Success at HubSpot and Vice President of Customer Experience at Rapid7, building and leading organizations through periods of rapid growth and platform expansion.
DryRun Security has completed its first year out of stealth with strong corporate momentum. Over the past twelve months, the company delivered major product innovations, industry-leading vulnerability research and laid the groundwork for securing autonomous software development in the age of agentic AI.
Early last year, DryRun Security closed an $8.7 million seed funding round, accelerating investment in product development, go-to-market expansion, and customer success. Enterprise and mid-market adoption is accelerating, with customers running more than 250,000 code reviews every month with DryRun Security, more than any other AI-native Code Security Intelligence provider.
Product Innovation Built for Agentic Development
Over the last twelve months, DryRun Security doubled down on product innovation to address a growing gap in traditional application security tools. The company’s AI-native Contextual Security Analysis (CSA) engine was purpose-built to support agentic code security intelligence, delivering security that understands code behavior, execution context and autonomous decision-making across both human-driven and AI-driven workflows.
Powered by this core technology, DryRun Security introduced the following innovations:
Natural Language Code Policies (NLCPs): allows security teams to define secure coding requirements in plain English. These policies remove the complexity of rule-based configuration and enable faster alignment between security intent and real-world development practices, an essential capability for governing autonomous coding agents. Policies are no longer ignored in an old share site, but live in every pull request.
Custom Policy Agent: enforces natural language policies directly within developer workflows, scanning every pull request and providing inline, actionable feedback. Acting as an autonomous security guardrail, the agent helps ensure that both human developers and AI coding agents operate within approved security boundaries.
Code Insights MCP: securely connects DryRun’s Code Insights to MCP-compatible AI assistants, enabling natural language search, summaries, and trend reporting across pull requests and repositories. This gives security and engineering leaders fast visibility into high-risk changes, emerging patterns, and audit-ready evidence, without living in yet another dashboard.
DryRun Security’s contextual analysis approach delivers measurable accuracy gains. In the 2025 SAST Accuracy Report, DryRun detected 88% of seeded vulnerabilities out of the box, outperforming five leading static analysis tools, particularly on complex logic and authorization flaws. These results further validate why DryRun’s AI-native approach is essential as applications grow more complex and less deterministic, especially in AI-rich environments.
The implications of these findings are even more pronounced in LLM-powered and agentic applications. In its research report, “Building Secure AI Applications,” DryRun Security found that more than 80% of vulnerabilities in LLM-enabled applications go undetected by traditional static analysis tools.
As execution paths become dynamic and code is increasingly generated or modified by autonomous agents, the shortcomings of legacy AppSec approaches are amplified, creating new classes of risk that demand a fundamentally different security model.
Posted in Commentary with tags Hacked on January 6, 2026 by itnerd
Ledger has confirmed that customer data was accessed following a security incident at its ecommerce and payments partner, Global-e Exposed information includes customer names, contact details, and order data such as purchased products and pricing, though Ledger says no financial data, passwords, or recovery phrases were compromised. Global-e began notifying affected users on January 5 and warned that phishing campaigns are already underway, with attackers impersonating both companies. Ledger has urged customers to be vigilant, emphasizing it will never request recovery phrases, send replacement devices, or ask users to scan QR codes. Security researchers have already observed real-world phishing attempts exploiting the breach.
Anders Askasen, VP of product marketing, Radiant Logic has this comment:
“This incident shows why identity risk extends far beyond credentials. Contact and order data, when paired with brand trust, is sufficient to drive highly effective phishing. That data typically sits scattered across third-party platforms, outside direct control and with little governance. Without unified identity and data observability, organizations discover phishing only after attackers have already weaponized their data.”
Will Baxter, Field CISO, Team Cymru adds this:
“What stands out here is how quickly threat actors pivoted from data exposure to active phishing campaigns. That speed highlights the need for continuous and proactive threat intelligence to spot emerging lures, spoofed domains, and brand impersonation infrastructure as soon as it appears. Organizations should not rely solely on customer warnings, but proactively monitor for brand abuse tied to known incidents. Early detection means faster takedowns — and better protection for users — even when the initial breach occurs through a third-party partner.”
We’re six days into the new year and we have a supply chain attack with a side of phishing tossed in. Thus proving that if you’re one of the good guys, you need to make sure that you’re looking for threats that will come at you from multiple sources as that’s how the bad guys roll these days.
Posted in Commentary with tags Recast on January 6, 2026 by itnerd
Recast today announced Jake Mosey has joined the company as Chief Product Officer. Mosey is a trusted customer advocate and technology industry veteran with a deep understanding of the opportunities and challenges ahead for Recast’s global customers using both Application Workspace and Right Click Tools. With a proven track record of translating user feedback into actionable strategies, he is committed to driving innovation by consistently elevating the voice of the customer.
Mosey has extensive experience in product strategy and development. He held several strategic roles during his 17-year tenure at Jamf, most recently serving as Vice President of Small and Medium-Sized Business Markets. As one of the founders of Jamf Nation, a vibrant community of IT systems administrators, he championed IT productivity, security, and knowledge sharing. These open exchanges informed product direction and helped drive the company’s notable growth and success.
Free Recast Tools Support the IT Community
Recast has also established a thriving and fast-growing user community. Mosey will be actively involved in using the input from this dynamic group to define the company’s product vision. In fact, his appointment comes at an exciting time for Recast, which expanded its portfolio of free community tools in 2025 with the addition of OSDCloud and the launch of Right Click Tools for Intune.
Cybercriminals can use malicious insiders as a direct means to access sensitive company resources, stealing confidential data or using the access to deploy a devastating cyberattack. Experts fromNordStellar, a threat exposure management platform, have discovered that dark web actors are actively seeking insiders from specific organizations to recruit for their operations.
Researchers at NordStellar found 25 unique dark web posts from users who claim that they are searching for employees from specific organizations over the past year. A significant part of these posts focuses explicitly on insiders who work for social media or cryptocurrency platforms.
“Employees can grant cybercriminals access to critical data, such as personal customer information and confidential business agreements,” says Vakaris Noreika, cybersecurity expert at NordStellar. “This data can be utilized to deploy ransomware attacks, sell intel on business agreements to competitors, or to carry out sophisticated phishing scams on unsuspecting victims whose personal data they managed to get their hands on.”
According to Noreika, insider threats can be challenging to spot and, therefore, may go undetected by security teams for a significant amount of time. Employees are trusted members of the organization and have legitimate access to company resources. Consequently, it can be challenging to pinpoint any anomalies in their behavior.
“Unlike external threats, insiders may not trigger typical security alerts, such as unusual login attempts or data transfers,” says Noreika. “Insiders are also familiar with the organization’s internal security policies and weaknesses, allowing them to adjust their actions to avoid suspicion.”
Direct insider recruitment
Noreika emphasizes that although some cybercriminals are searching for insiders on the dark web, the recruitment process is usually carried out privately. Bad actors target specific employees within the organization, especially those with technical capabilities that aid in their operations or have access to highly sensitive company data.
Mantas Sabeckis, a senior threat intelligence researcher at Nord Security, home to NordStellar and other advanced cybersecurity solutions, shares that he has been contacted by cybercriminals for possible recruitment opportunities numerous times. He explains that in the past, bad actors have reached out to him on LinkedIn, most likely intrigued by his experience in cybersecurity, and notes that the process of cybercriminals recruiting insiders likely follows the same playbook.
“In my experience, after the first few messages, bad actors try to direct the communication to a different channel, such as Telegram or WhatsApp,” says Sabeckis. “One time, I was contacted by a recruitment specialist from Singapore searching for a candidate for a role in a large organization. She did not name the specific organization and asked to continue our conversation on WhatsApp, which is not an unusual request in itself, as different messaging platforms are popular in different countries.”
According to Sabeckis, after their conversation moved to WhatsApp, the recruiter started sharing more details — she explained that she was looking to recruit an individual to work for a wealthy and influential family in Singapore, without disclosing which one.
“The statement definitely raised red flags, but I was curious to hear what exactly they were looking for,” says Sabeckis. “She continued to explain that the role would be similar to a bug bounty. When asked for more details, the recruiter finally divulged that they were looking for an individual to take down websites containing very sensitive and illegal material, offering to provide compensation in cryptocurrency.”
Sabeckis explains that, by its nature, the role fell into a “gray area,” which is a common tactic used by bad actors to recruit individuals. After the recruited individuals have their foot in the door, the tasks eventually become more demanding. Evidence of the individuals completing the tasks is later used as leverage to blackmail the person into carrying out illegal activity or risk being compromised.
Safeguarding against insider threats
Noreika emphasizes that high observability into system and data usage is the foundation of an insider threat-resistant cybersecurity strategy. He explains that any unexpected system behavior or access patterns must be flagged, reported, and thoroughly examined.
“Patterns of unusual behaviour are the first indicator that the user might be an insider,” says Noreika. “Security teams should keep an eye out for employees who are frequently accessing sensitive information and make sure that they have the proper authorization. Data exfiltration to external parties or devices is another major red flag to look out for.”
He explains that data loss prevention tools are essential for reducing the possibility of data theft and transfer from within. Proper network segmentation and the implementation of strong access controls to prevent privilege drift, the accumulation of excess access rights, are other necessary security measures to stop insiders and attackers who have already infiltrated the network from acquiring sensitive data.
“Dark web monitoring for information leaks or posts looking for insiders at the company is also crucial,” says Noreika. “It can be the first warning sign that a company might be at greater risk of being exposed. After flagging such activity, it’s necessary to stay on high alert and ensure that all of the precautionary measures, as well as a recovery plan, are in place.”
According to Noreika, an incident recovery plan is a significant requisite in minimizing the fallout of a cyberattack caused by insider threats. An effective recovery plan should cover incident detection and outline the key steps the organization should take to contain the threat and mitigate damage.
These steps may include removing the malicious employee’s access to sensitive data and ensuring that an external attacker who has been working with the insider connection to the network has been terminated.
ABOUT NORDSTELLAR
NordStellar is a next-generation threat exposure management platform that enables companies to detect and respond to cyber threats before they escalate. It includes solutions like dark web and data breach monitoring, helping to prevent account takeovers, session hijacking, and other threats. NordStellar was created by Nord Security, a globally recognized company behind one of the world’s most popular digital privacy tools, NordVPN. For more information, visit nordstellar.com
Leaseweb Appoints Jan Willem des Tombe as Global Strategic Relations Director
Posted in Commentary with tags Leaseweb on January 6, 2026 by itnerdLeaseweb today announced the appointment of Jan Willem des Tombe as its new Global Strategic Relations Director, reinforcing its strategic ambition to accelerate growth and strengthen its position in the hybrid cloud and sovereign infrastructure landscape. Des Tombe will focus on developing and strengthening Leaseweb’s global market narrative, increasing industry visibility and recognition, and supporting strategic growth initiatives across marketing, communications, sales, partnerships, and M&A.
With over two decades of experience in the TMT, SaaS, IT Managed Services, Cloud, Workspace, and E-commerce sectors, des Tombe brings extensive leadership expertise in scaling businesses, developing commercial strategy, and guiding organizations through transformation. He has previously worked with organizations including Reckitt Benckiser, Tripolis Solutions (now Spotler), and KPN Interned Services, and founded and chaired public-private industry platforms DHPA (now Dutch Cloud Community) and DINL.
Leave a comment »