Archive for June 10, 2026

Check Point Advances Secure AI Transformation for MSPs with New Platform, AI Security Capabilities, and Unified Security Bundles

Posted in Commentary with tags on June 10, 2026 by itnerd

Check Point today announced a major expansion of its Managed Service Provider (MSP) platform. Unveiled at the Pax8 Beyond 2026 flagship conference and rolling out globally to Check Point partners, the new platform is designed to help MSPs secure AI adoption, streamline operations, and simplify managed security delivery.

The announcement brings together three strategic innovations under a single MSP vision:

  • Securing AI and AI usage for MSPs
  • A new multi-tenant MSP management platform with Management Control Plane (MCP) access
  • Unified managed security bundles delivered through a simplified licensing model

Together, these capabilities are designed to help MSPs evolve from infrastructure providers into strategic security and AI transformation partners for their customers.

Securing AI and AI usage for the MSP Market

As AI adoption accelerates across businesses of all sizes, the conversation in the MSP community has focused largely on using AI, not securing it. According to Check Point’s 2026 Cloud Security Report, while 77 percent of organizations have updated their security strategies in response to AI, only 26 percent say they have the architectural capability to enforce those strategies, exposing a growing AI security gap.

To help address this challenge, Check Point is extending Workforce AI Security into its MSP ecosystem, enabling MSPs to discover AI usage, govern employee interactions with AI tools, and protect sensitive data across emerging AI applications and agents.

“AI is reshaping both the threat landscape, and the expectations customers now place on their service providers,” said Dave Meister, Vice President of MSP/MSSP at Check Point Software Technologies. “MSPs are no longer just managing infrastructure — they are helping customers navigate AI transformation. With these new capabilities, we’re giving our partners their first opportunity to discover, secure and govern AI usage, and AI agents at scale in an MSP friendly monthly consumption model with no minimums or locks in in a multi-tenanted environment”

New MSP Platform: Multi-Tenant, AI-Integrated, Built for Scale

The new MSP platform is purpose-built to meet the operational demands of managed service providers, providing:

  • Access to the Check Point product portfolio in a multi-tenant, MSP-friendly environment
  • Native integration of AI security capabilities, including Workforce AI
  • Reinforces Check Point’s open-garden strategy through expanded Professional Services Automation (PSA) integrations
  • MCP (Management Control Plane) for the MSP portal
  • A new dedicated MSP experience team focused on support, onboarding, enablement, and ongoing partner success

This platform establishes the foundation for Check Point to serve as a long-term infrastructure partner for MSPs, enabling them to manage comprehensive security from a single interface.

Unified Security Bundles for Simplified Managed Delivery

Check Point also introduced new unified MSP security bundles that simplify how partners procure, manage, and deliver managed security services.

The bundles combine email security, endpoint security, browser security, mobile security, SASE, Workforce AI, security awareness training, and DMARC into a single integrated offering. Delivered through a unified management experience and single SKU aligned to the partners’ Microsoft licensing, the bundles help MSPs reduce tool sprawl, streamline procurement, improve operational efficiency, and accelerate customer onboarding.

For partners, the bundles create a more scalable and cost-effective managed security model. For customers, they deliver a simplified, enterprise-grade security experience spanning users, devices, email, SaaS applications, networks, and AI environments. The bundles are also packaged in a simple, easy-to-understand format that enables MSPs to more effectively communicate security value to customers, regardless of their technical expertise.

Pax8, which named Check Point the official AI sponsor of Beyond 2026, highlighted the announcement during its keynote, reflecting growing demand for AI-driven security and the expanding role of MSPs as strategic advisors. Pax8 has also named Check Point its Most Valuable Vendor, recognizing its leadership in delivering innovative cyber security solutions across North America. The award will be presented on the Beyond 2026 mainstage, reinforcing Check Point’s commitment to advancing security and threat prevention for the MSP community.

The new MSP platform is available to Check Point partners beginning today. For more information visit checkpoint.com/partners/msp-program/.

BDO Canada launches Defence Cyber Readiness Accelerator

Posted in Commentary with tags on June 10, 2026 by itnerd

Today, BDO Canada announced the launch of its Defence Cyber Readiness Accelerator, a new advisory service designed to help businesses navigate the Canadian Program for Cyber Security Certification (CPCSC). 

As the CPCSC, a new federal cybersecurity framework for defence procurement, introduces baseline cybersecurity requirements for organizations handling sensitive but unclassified defence information, BDO Canada’s Defence Cyber Readiness Accelerator is designed to help organizations prepare.

The offering supports businesses in assessing readiness, identifying compliance gaps, and building practical pathways toward certification and long-term procurement eligibility. As part of BDO Canada’s broader defence-sector offering spanning compliance, capability, and capital, the Accelerator is intended to help strengthen supply chain trust and support wider participation in Canada’s growing defence industry.

A narrowing window for Canadian suppliers

As the federal government begins integrating CPCSC requirements into upcoming defence procurement opportunities, organizations across the supply chain are facing increasing pressure to prepare. Companies that are unable to demonstrate the appropriate level of cybersecurity readiness may risk losing access to future contract opportunities and could face challenges maintaining eligibility for existing defence-related work.

Built on BDO’s defence sector experience

BDO Canada already serves more than 250 clients across the Canadian defence ecosystem, including aerospace manufacturers, robotics innovators, infrastructure firms, logistics providers, and technology suppliers. The firm’s defence industry team brings together cross-functional expertise across cybersecurity, regulatory compliance, government incentives, deal advisory, manufacturing, infrastructure, and public sector, giving businesses access to a single team that understands the full defence-entry lifecycle.

Kyndryl launches AI Orchestration for Business to accelerate agent-driven transformation

Posted in Commentary on June 10, 2026 by itnerd

Kyndryl today announced Kyndryl AI Orchestration for Business, a new capability built with the Kyndryl Agentic AI Framework designed to move enterprises beyond experimentation and siloed workflows to enterprise-wide AI impact.

As organizations in retail, consumer packaged goods (CPG), travel and transportation, and other industries struggle to leverage AI to meet customer expectations around personalized experiences, real-time responsiveness and seamless fulfillment, Kyndryl AI Orchestration for Business helps to address these challenges. The capability autonomously interacts with AI agents across supply chains, commerce, finance, IT and customer operations to enable seamless coordination, cross-functional alignment and controlled execution at scale – supporting governed, policy-driven AI agent functionality.

Kyndryl AI Orchestration for Business combines data, events and AI agents from across the enterprise to support role-based decision making and real-time action. Instead of reacting to issues after they occur, leaders and frontline teams receive proactive alerts, recommended actions and embedded agentic workflows that allow them to augment their own workstreams to intervene or approve automated actions before disruptions impact customers or revenue.

Kyndryl AI Orchestration for Business supports agentic workflows for use cases across store and enterprise operations, including:

  • Agentic Commerce: Connects supply chain, pricing, promotions and customer engagement – allowing organizations to anticipate demand shifts, manage disruptions and personalize customer experiences without sacrificing control
  • Proactive supply chain disruption management: Identifies supply risks, impacted SKUs and financial exposure in real time, prompting planners and managers to act before stock‑outs reach stores or customers
  • Role‑based operational orchestration: Delivers alerts, recommendations and actions to the right roles – such as demand planners, supply chain leaders and pricing teams – enabling faster, more coordinated decisions across functions
  • Policy‑driven execution and auditability: Embeds operational, regulatory and business rules directly into agent workflows at the reasoning level using policy as code, with full transparency into how decisions are made and executed
  • Coordinated commerce and customer experience enablement: Aligns supply, inventory, pricing and fulfillment decisions in real time to reduce disruptions, protect revenue and deliver a more consistent customer experience

Kyndryl Consult experts will help customers design, deliver and deploy AI Orchestration for Business, while leveraging the full Kyndryl Agentic AI Framework and the company’s deep experience running mission-critical systems across hybrid cloud, on-premises and edge environments. The capability is cloud and large language model-agnostic, integrates with existing enterprise platforms and can operate with or without managed services tools – giving organizations the flexibility to modernize at their own pace.

Kyndryl is uniquely positioned to be the orchestration partner of choice for these industries, recognizing that achieving enterprise-scale process transformation requires targeted modernization across varied technology landscapes. Kyndryl accelerates this journey through a catalog of workflows and AI-native industry architectures that deliver speed, consistency and quality at scale. From unlocking legacy data and transactions across mainframe and distributed environments to re-architecting applications to enable Model Context Protocol servers and power agentic workflows, Kyndryl leverages its comprehensive services to drive efficient end-to-end transformation.

Learn more information about Kyndryl AI Orchestration for Business

Global Cyber Attacks Ease in May 2026, But Ransomware Surges 48% As Threats Reorganize

Posted in Commentary with tags on June 10, 2026 by itnerd

In May 2026, global cyber-attack activity eased from April’s sharp rebound, though the underlying trends offer little genuine comfort. Organizations experienced an average of 2,055 weekly cyber-attacks, a 2% increase year over year and a short term 7% decrease month over month. While the monthly decline may read as stabilization, ransomware activity surged to its highest year-over-year growth rate of 2026, and GenAI-driven data exposure risks continued to deepen across enterprise environments.

Check Point Research data consistently shows that short-term volume moderation does not equal reduced risk. Adversaries keep recalibrating timing, tools, and targeting, and May is a clear example of that pattern.

The Sectors That Kept Taking the Hits

Education absorbed more attacks than any other industry in May, averaging 4,641 weekly attacks per organization, with year-over-year volumes climbing another 7%. The combination of open networks, high student turnover, and chronically stretched security budgets continues to make schools and universities an almost frictionless target. Government sat in second place at 2,620 weekly attacks, and Telecommunications followed at 2,583, both essentially where they were a year ago.

Where in the World Attacks Hit Hardest

The more interesting movement happened further down the list. Agriculture surged 51% year over year to 2,243 weekly attacks. Hospitality, Travel and Recreation climbed 24% to 2,291, and Construction and Engineering rose 23% to 1,999. These are not sectors anyone would have highlighted as cyber attack hotbeds two years ago. The growing digitization of their operations, combined with the sheer availability of automated attack tooling, is changing that calculation fast.

Latin America held the top spot for another month running, with 3,149 weekly attacks per organization and a 13% year-over-year increase, as rapid digitalization continues to outpace security maturity across the region. Africa posted the most dramatic shift of any region, down 20% year over year, though volumes remain high enough to keep it firmly in the danger zone.

GenAI: The Risk That Grows With Every New Tool Adopted

Enterprise GenAI adoption showed no signs of slowing in May, and neither did the exposure risks that come with it.

  • 1 in every 25 GenAI prompts from enterprise networks carried a high risk of sensitive data leakage
  • 91% of organizations using GenAI tools regularly were touched by this risk
  • A further 22% of prompts contained potentially sensitive information
  • Organizations ran an average of 9 different GenAI tools during the month
  • The average enterprise user sent 70 GenAI prompts per month

Every new tool adopted without a governance framework in place is another surface where credentials, intellectual property, and internal data can slip out quietly. The exposure does not announce itself.

Ransomware Recorded Its Sharpest Year-Over-Year Jump of 2026

If May had a headline, this was it. 698 ransomware attacks were reported globally, a 48% increase on May 2025, when 472 incidents were recorded. The growth landed across every region: Asia up 119%, EMEA up 40%, the Americas up 39%. This was not concentrated pressure from one geography or one group. It was broad-based acceleration.

Business Services bore the sharpest end of it, accounting for 35% of all ransomware victims and recording a year-over-year increase of 359%, from 54 incidents to 248 in a single month. Consumer Goods and Services grew 223%, and Industrial Manufacturing climbed 50% from last year.

North America absorbed 49% of reported incidents globally, followed by Europe at 22% and APAC at 19%. The United States alone accounted for 43% of all reported ransomware victims, with Canada (5.6%), the United Kingdom (4.6%), Germany (4.0%), and Spain (3.0%) rounding out the top five.

Three Groups Led, But 61 Were Active

Ransomware in May was dominated at the top but remarkably spread out everywhere else. The top three groups accounted for 39% of reported attacks, all growing above the average rate. The other 61% was distributed across 58 additional active groups, a level of fragmentation that reflects just how industrialized and competitive the ransomware market has become.

Qilin led the field at 14% of published attacks, continuing its expansion following RansomHub’s retirement and the aggressive affiliate recruitment drive it has been running since early 2025. The Gentlemen secured second place at 10%, a striking position for a group that had zero recorded activity in May 2025. Founded in mid-2025 by a former Qilin affiliate, the group built its early reach around self-service access to approximately 14,000 pre-exploited FortiGate devices and has since grown into a top global threat in under a year. Their May 2026 operator communications announced a tactical evolution away from brute-force EDR-killing toward surgical userland evasion, suggesting a group investing seriously in longevity. DragonForce climbed to third at 8%, having risen five positions since January 2026 by absorbing displaced RansomHub affiliates and running a white-label model that lets affiliates operate entirely independent brands on shared infrastructure.

Reading May Correctly

The dip in overall volumes is real, but it is the wrong thing to anchor on. Underneath it, ransomware posted its biggest year-over-year leap of the year, new groups matured at a pace that has no real precedent in recent history, and sectors that once sat comfortably outside the crosshairs are now absorbing thousands of incidents per month. The threat landscape is not pausing. It is reorganizing. A prevention-first, AI-powered security strategy across cloud, network, endpoint, and user environments is not just best practice in that context. It is the only realistic response to a landscape that adapts faster than reactive models can follow.

University of Nottingham first public victim in latest ShinyHunters attack

Posted in Commentary with tags on June 10, 2026 by itnerd

You may have seen that the University of Nottingham looks to be the first public victim of a new attack salvo by ShinyHunters.

We know this information is likely to cause concern for students and staff in our community and we apologise for any anxiety that this may cause.

Two groups have been impacted by the incident – current students, and alumni.

We are working to understand the data that has been accessed and have contacted those students and alumni affected directly. We are working closely with Action Fraud, the Information Commissioner’s Office, and other regulatory bodies.

We will remain in contact with those directly impacted and will continue to provide updates as the situation develops.

Targeted at Oracle’s Peoplesoft software, it seems like yet another example of supply chain attacks that can spread far and wide at little cost to the attacker.

Raluca Saceanu, CEO of Smarttech247, argues that the best strategy in the world is worthless if you can’t trust the whole chain:

“We’ve seen this type of supply chain attack before. It’s yet another example of how the best cybersecurity strategy in the world is worthless if partners up and down the chain aren’t working to the same standards. The Salesloft Drift breach — where a single compromised integration exposed over 700 organisations — proves exactly this point. Most attackers don’t discriminate: Nottingham is likely just the first tremor in a chain reaction of similarly affected businesses. In this environment, trust is critical. That’s only possible if all parties react swiftly and effectively to the threat; if communications are open and intelligence is shared immediately; and if security in every organisation has a human face that’s clearly following best practice and protocols. Without this, every part of the supply chain remains an island. And isolated victims are much easier to pick off.”

Lee Sult, Chief Investigator of Binalyze, points out how organisations can try and disrupt ShinyHunters’ apparent winning streak:

“If this is a supply chain attack, it’s another painful reminder that attackers love the path of least resistance. Why compromise a group of organisations separately when you can just do one and move laterally from there? It also makes it clear that nobody is exempt from being a target: if you use software, you’re in the firing line.

“Initial reports suggest the attackers have stolen financial data and even National Insurance numbers. That can be used for devastating follow-on attacks should the data be shared among cybercriminal groups for scams and phishing attempts.

“If it’s all true, ShinyHunters is on a winning streak against universities. This is the latest addition to their trail of havoc in the education sector. Just recently we had the ransomware attack and settlement on education software provider Canvas which impacted countless universities and people. They’re getting what they want from their attacks.

“That’s why thorough, fast investigations are crucial to know exactly what happened, showing victims the right steps have been taken to mitigate impact, and getting the word out to all who may have been affected.”

My advice is that ShinyHunters is a force to be taken seriously. Thus if you don’t take them seriously, you will pay the price.

A Q&A With Volvo Cars Canada Regarding The Use Of Advanced Sensors And Vehicle Data

Posted in Commentary with tags on June 10, 2026 by itnerd

I was having a conversation with Volvo Cars Canada about using advanced sensors and vehicle data in terms of identifying near miss accidents. The key is that there are near miss accidents. As in there are not accidents. This helps Volvo kicks things up a notch as they are increasing their safety status beyond what’s available with other cards.

Here’s the Q & A from Volvo Cars Canada:

Q. Talk to me about the use of advanced sensors and vehicle data in terms of identifying near miss accidents. 

A. At Volvo, we believe preventing accidents starts long before a collision occurs. Near-miss data is critical because it lets us identify risk before a crash happens. Using advanced sensors like cameras, radars and sensors, vehicles can detect dangerous situations in real time, often stepping in with warnings or interventions to help avoid a collision.

By learning from these moments of real-world driving situations, we can continuously improve our safety systems. Ultimately, it shifts safety from reactive to preventative, helping us move closer to our ambition of zero collisions.

Q. How does identifying near miss accidents help with elimination of collisions?

A. To prevent collisions, you first need to understand how and why they happen. Near-miss events provide valuable insights into situations where a collision was narrowly avoided, helping Volvo identify risks before they lead to real-world accidents.

These learnings are incorporated into the Volvo Safety Standard, Volvo’s internal safety benchmark that goes beyond regulatory requirements and traditional crash testing. By studying real-world driving scenarios and using that data to inform both physical and virtual crash testing, Volvo develops preventative safety systems that better address the complexities of everyday driving.

This continuous feedback loop helps Volvo identify risks earlier, improve collision avoidance technologies, and move closer to its long-term ambition of eliminating serious injuries and fatalities in new Volvo vehicles.

Q. How does this help make Volvo cars safer? 

A. Real-world data enables Volvo to continuously improve both active and passive safety systems based on how people actually drive, rather than solely relying on standardized testing scenarios.

Insights gathered from crash investigations, near-miss events, connected vehicle data, onboard sensors, and driver behaviour help Volvo refine technologies such as automatic emergency braking, collision avoidance systems, driver assistance features, occupant protection, and driver monitoring.

This data-driven development process allows Volvo engineers to validate safety innovations against real-world conditions and continuously improve vehicle safety performance over time.

What makes this even more powerful is how we process and learn from the data. With Volvo Cars’ next generation core compute and centralized systems like HuginCore we can analyze these signals at scale and continuously improve how the vehicle understands risk. Combined with over-the-air updates, we’re able to refine and enhance our safety systems based on these real-world learnings, without customers needing to visit a retailer.

Q. Are there other advancements that help make Volvo cars safer? 

A. Safety innovation remains at the core of Volvo Cars. One of our latest advancements is the new multi-adaptive safety belt, an award-winning, world-first technology designed to further enhance occupant protection in real-world traffic situations.

Using real-time data from interior and exterior sensors, the system can adapt protection based on factors such as a person’s size, body shape, seating position, and crash severity. By significantly expanding the range of load-limiting settings that control how force is applied during a collision, the belt can provide more personalized protection for different occupants. It’s an example of how Volvo continues to use technology and data to make safety systems more intelligent, responsive, and effective.

Pinterest adds Amazon Storefront linking for creators

Posted in Commentary with tags on June 10, 2026 by itnerd

Creators come to Pinterest to share what they know, love and recommend. But inspiration needs to translate into real opportunity. We want to make it easier and more direct for creators to earn from the community and trust they’ve built on Pinterest.

Today, Pinterest is offering Amazon Storefront linking, a new tool that lets creators connect their Amazon Storefront directly to their Pinterest account. Once connected, their affiliate link is automatically applied whenever they tag an eligible Amazon product. No extra steps. No copy-and-paste workaround. Just a cleaner path from inspiration to potential earnings. 

This matters because Pinterest isn’t a place where people scroll aimlessly. It’s a place where people come with intent and purpose. More than 50% of Pinterest users come to our platform to shop, and people search Pinterest more than 80 billion times a month.

With this feature, eligible creators will see their Amazon Storefront handle featured directly on their Pinterest profile, giving users another way to discover the products and recommendations from the creators they trust most. Storefront linking with other partners will be available soon.

From friction to simpler earning

For too long, connecting content to shoppable products has involved friction; many manual steps like copying and pasting individual affiliate links slowed momentum. Amazon Storefront linking changes that. Creators can:

  • Link their storefront once: In just a few steps, creators can securely connect their Amazon Storefront to their Pinterest account.
  • Tag Amazon products with ease: When creators tag Amazon products on their Pins, Pinterest will automatically apply their Amazon affiliate information, eliminating the need to manually add affiliate links or IDs.
  • Showcase their storefront profile: Creators can now feature their Amazon Storefront on their Pinterest profile. That gives users a fuller picture of the products a creator recommends, far beyond a single Pin.

A more shoppable Pinterest

Pinterest is more shoppable than ever, with users visiting to “find or shop for products” at more than twice the rate seen on other major social platforms. For creators, linking their Amazon Storefront to Pinterest brings together two things that are core and connected to the Pinterest experience: a place to organize and share ideas, and a storefront where those ideas can turn into action. 

More information

For more information about creator tools and monetization on Pinterest, visit our Help Center and the Pinterest for Creators hub.

TELUS brings its full Optik TV offering to Ontario, unlocking the ultimate entertainment experience

Posted in Commentary with tags on June 10, 2026 by itnerd

The complete TELUS Optik TV suite is now available in Ontario, offering customers the ultimate entertainment experience with flexible TV plans that give customers access to over 450 sports and live TV channels, plus streaming services. With Optik TV, customers can select the streaming and channels they actually want – including services like Netflix, Disney+, Crave, Prime Video and Apple TV – refresh their lineup every 30 days, and save money doing it. TELUS Optik TV customers also gain access to exclusive bundling options to enhance their connected experience at home and on-the-go, including TELUS Mobility, SmartHome Security and SmartEnergy.

To qualify for Optik TV, customers must have TELUS PureFibre Internet. Experience the leading internet technology for speed and reliability — TELUS PureFibre delivers a 100% fibre-optic, direct-to-home connection. With PureFibre, households gain the seamless streaming and on-demand experience Optik TV provides, with faster Internet speeds that don’t lag or stall when multiple devices are connected. Beyond Optik TV, PureFibre Internet unlocks the future potential for connected homes and enables immersive technologies like augmented and virtual reality to reach their full potential.

Conditions and exclusions apply. For more information, please visit telus.com/optik

Liquibase Introduces Agent Safe Governance for AI-Generated Database Change Share

Posted in Commentary with tags on June 10, 2026 by itnerd

Liquibase today announced Liquibase Secure 5.2, a major release introducing Agent Safe Governance for AI-generated database change. Liquibase Secure 5.2 helps enterprises validate, track, and govern database change before and after production, whether created by humans or AI.

Liquibase also announced that Liquibase Secure earned five 2026 TrustRadius Top Rated Awards across Database DevOps, Build Automation, Release Management, Database Management, and Version Control. TrustRadius Top Rated Awards are based entirely on customer reviews, with no paid placement or analyst opinion, and recognize products that meet criteria for review recency, customer rating, and category relevance.

Companies are moving faster across applications, infrastructure, data products, and AI initiatives. But every application, data product, and AI model still depends on database change. That creates a new pressure point: database changes can now be generated in seconds, while many enterprise controls still rely on tickets, manual reviews, disconnected scripts, and after-the-fact audit trails.

According to Liquibase’s State of Database Change Governance report, 96% of organizations allow AI to interact with production databases. As tools such as Cursor, Claude, GitHub Copilot, and other AI assistants become part of the developer workflow, database changes are no longer created only by humans. But faster creation does not mean those changes are safe to deploy.

Agent Safe Governance is Liquibase’s answer to that shift. AI can help create a database change, but it cannot bypass the checks, approvals, audit trails, schema lineage, drift detection, and recovery controls enterprises require before production.

AI is changing how database changes are created. Liquibase Secure governs how they reach production.

“AI agents are becoming part of how developers work, but they should not have a free pass to change production databases,” said Pete Pickerill, Co-Founder at Liquibase. “Agent Safe Governance means AI can help create a database change, while Liquibase Secure validates it, tracks it, checks it against policy, preserves schema lineage, detects drift, and controls how it moves to production. That is the balance enterprises need: faster development without turning database change into an unmanaged risk surface.”

Liquibase Secure 5.2 uses the Liquibase MCP server to connect AI-assisted workflows to govern database change management. Developers and AI assistants can create Liquibase-formatted changelogs, schema updates, rollback logic, and AI-generated DDL, while Liquibase Secure applies policy checks, governance workflows, drift detection, and audit-ready evidence before changes reach production.

Liquibase Secure 5.2 Brings Agent Safe Governance to the Database Layer: Liquibase Secure 5.2 gives enterprises one control plane for every database change, human or AI. The release connects new AI-assisted workflows with the proven governance controls enterprises already rely on to validate, track, and secure database change.

AI-assisted database change authoring through the Liquibase MCP server: The Liquibase MCP server connects AI-assisted workflows to Liquibase Secure, helping developers and AI assistants create structured, reviewable, and governed database changelogs, schema updates, rollback logic, and AI-generated DDL. AI can assist with authoring, but Liquibase Secure governs the path to production.

Change Intelligence and schema lineage for human and AI-generated change: Liquibase Secure gives teams visibility into the full lifecycle of every database change. Change Intelligence helps teams understand what changed, who or what created it, where it ran, whether controls were followed, how the schema changed over time, whether drift exists, and what evidence is available for audit or investigation.

Policy checks and drift detection as the governance foundation: Liquibase Secure applies policy checks before deployment to help teams block risky operations, enforce standards, support separation of duties, and validate compliance requirements. Drift detection helps identify when environments no longer match the approved database state, including manual updates, emergency fixes, shadow changes, or AI-assisted changes that bypass governed workflows.

Expanded enterprise database coverage: Liquibase Secure 5.2 deepens support for complex enterprise database estates with new capabilities for Teradata, MongoDB, and DynamoDB. These enhancements help teams extend governed change across the databases that power mission-critical applications, data products, and AI systems.

Machine-Readable Vulnerability Intelligence with VEX: Liquibase Secure 5.2 adds Vulnerability Exploitability eXchange, or VEX, support to provide machine-readable vulnerability assessments for Liquibase products. Published through the Liquibase VEX repository, included alongside SBOM files inside the Secure distribution, and available as standalone files on the Liquibase download site, VEX helps enterprise security teams understand vulnerability context, integrate with automated scanners, and streamline security response.

One Control Plane. Every Database. Every Change. Human or AI. Liquibase Secure 5.2 extends Liquibase’s role as the enterprise control plane for database change. It helps organizations govern database change across human developers, AI assistants, CI/CD pipelines, and production environments.

For regulated industries, this is already a board-level issue. Financial services, healthcare, insurance, retail, media, and technology organizations must prove that database changes are reviewed, approved, traceable, recoverable, and compliant. AI does not remove that requirement. It raises the stakes.

With Liquibase Secure 5.2, enterprises can move from reactive database control to continuous governance, with one consistent way to manage database change across applications, data products, and AI systems.

Liquibase Secure’s five 2026 TrustRadius Top Rated Awards reinforce the same customer demand driving this release: database change needs to move faster, stay governed, and remain trusted across increasingly complex enterprise environments.

Availability

Liquibase Secure 5.2 is available now. Learn more about Agent Safe Governance and Liquibase Secure 5.2.

$2 Trillion a Year Never Makes It from Obligation to Settlement. Rivvun AI Is Built to Recover It.

Posted in Commentary on June 10, 2026 by itnerd

Rivvun AI Inc. today announced a $7.55 million oversubscribed seed round led by Sitara Capital and 3one4 Capital, to deploy an autonomous AI execution layer purpose-built for enterprise spend and revenue recovery.

The scale of the problem is staggering. McKinsey research finds that enterprise procurement functions lose up to one-third of planned savings during execution — with an additional 3– 4% of total external spend lost to transaction inefficiency and noncompliance. Across fortune 2000 revenues that compounds to more than $2T in value that never reaches the bottom line. The money isn’t lost to fraud or bad contracts. It disappears in the gap between what was contractually committed and what enterprise systems were ever built to collect.

Built by the Executives Who Saw This Problem at Scale

Anand Veerkar and Niranjan Umarane spent the last decade as senior executives at Icertis, where they helped scale the company to more than $350 million ARR and built a platform governing some of the world’s largest commercial portfolios. Across every industry, the pattern was consistent: terms of trade were precisely structured; financial execution against them was not. Money owed under negotiated agreements quietly went uncollected — not because anyone decided to leave it, but because no system in the enterprise stack was designed to recover it. They left to build that system. They are joined by serial entrepreneur Patrick Linton, who brings deep experience scaling global operations for enterprise software companies.

The Problem Is Structural. So Is the Solution.

ERP systems record transactions. CRM tools track relationships. Procurement platforms manage approvals. None of them enforce outcomes. Rivvun’s autonomous AI execution layer connects to existing ERP, CRM, and procurement systems, interprets commercial obligations, identifies what hasn’t settled as agreed, and initiates recovery at the transaction level. No rip-and-replace. No new system of record.

Two agentic families power the platform: Spend Assurance on the buy side — recovering supplier rebates, pricing commitments, and procurement obligations that have gone unenforced; and Margin Defense on the sell side — recovering customer settlement variances, trade term discrepancies, and revenue that left the P&L without authorization.

Built Vertical-First, Because Leakage Isn’t Generic

Chargeback mechanics in pharma — GPO compliance, government pricing obligations — look nothing like settlement gaps in banking or trade term failures in CPG. Generic AI produces generic results. Rivvun deploys with vertical-specific agent logic tuned to the precise failure patterns of each industry, across Pharma, Healthcare, Banking, CPG/Retail and Industrial.