Archive for the Commentary Category

« Older Entries

Airrived Named a Leader in the IDC MarketScape: Worldwide Standalone AI SOC Platforms 2026 Vendor Assessment

Posted in Commentary with tags on October 13, 2026 by itnerd

Airrived has been named a Leader in the IDC MarketScape: Worldwide Standalone AI SOC Platforms 2026 Vendor Assessment (doc # US54127026, September 2026).

Airrived Co-founder and CEO Anurag Gurtu said, “Being named a Leader in the IDC MarketScape for standalone AI SOC platforms is recognition of a problem security teams already know. Alert volume has outrun headcount, and a copilot on top of the existing stack does not close that gap.

Airrived turns business users into AI experts.

Airrived, a Gartner Cool Vendor in Agentic AI Security, is an enterprise-grade Agentic OS and Sovereign AI Platform that lets business and domain experts build, deploy, and govern autonomous AI — without becoming AI engineers.

Users bring the domain expertise. Airrived brings the reasoning, enterprise context, orchestration, governance, and infrastructure needed to turn that expertise into autonomous systems capable of reasoning, collaborating, deciding, and acting.

Unlike copilots, which mainly assist users, or developer frameworks, which require teams to engineer agents from scratch, Airrived lets enterprises automate complex, multi-step work across cybersecurity, IT, and business operations.

The platform combines deep reasoning, Agentic Mesh, Context Lake, multi-agent orchestration, governance, and end-to-end Agentic Observability — plus pre-built agents and applications that dramatically shorten the path from AI experimentation to production.

Built for the Sovereign AI Enterprise.

Airrived gives enterprises full control over where and how their AI runs. It can be deployed in the cloud, in customer VPCs, on-premises, on private GPU infrastructure, or in fully air-gapped environments — keeping data, models, agents, context, and AI operations under customer control at all times.

That removes a major barrier to enterprise AI adoption: organizations can put autonomous AI directly into the hands of the people who understand the business, without requiring them to master the underlying technology.

With adoption across Fortune 150 enterprises and organizations worldwide, this recognition follows a string of major product advancements from Airrived — including Agentic Observability and Sovereign Agentic AI — as the company continues advancing its vision for governed, autonomous AI across the enterprise.

Leave a comment »

Liquibase Secure Now Available in Google Cloud Marketplace and Microsoft Marketplace

Posted in Commentary with tags on October 13, 2026 by itnerd

Liquibase today announced that Liquibase Secure is now available in Google Cloud Marketplace and Microsoft Marketplace, joining its existing listings in AWS Marketplace and Snowflake Marketplace. The expanded availability is part of Liquibase’s commitment to being easy to do business with: customers can buy Liquibase Secure through the channel that fits their organization and govern database change wherever their applications and data run.

This extended availability comes as the way software is built is changing quickly. Developers are shipping more frequently, AI coding assistants are generating more code, and agents are beginning to participate across the software delivery lifecycle. That means more database change, from more sources, moving toward production faster.

Liquibase Secure gives enterprises one governed path for standardized change, whether it was written by a developer, generated with AI, or initiated through an automated workflow.

Buy Through the Cloud. Govern Across the Enterprise.

With the addition of Google Cloud Marketplace and Microsoft Marketplace, Liquibase Secure is now available in multiple marketplaces. Buying through a marketplace lets organizations work through the cloud accounts and procurement processes they already have, simplify vendor onboarding, and consolidate billing alongside their other cloud spend. Customers can continue to buy directly from Liquibase or through its partners.

More Change Requires Better Control

AI coding assistants are already generating more code, which means more database change moving through the software delivery lifecycle. Now AI is moving beyond assistance. Agents can generate SQL, modify schemas, propose migrations, and increasingly take action through automated workflows.

The problem isn’t whether a database change was written by a human or AI. The question is what governs that change before it reaches production and what evidence is left behind after it does.

That becomes even more important as software delivery becomes more autonomous. An agent may generate a change, automated systems may validate and deploy it, and no person may manually touch it along the way. Enterprises still need to know what changed, who or what initiated it, what controls were applied, and what ultimately reached production.

Liquibase Secure puts governance and proof of control directly into the database delivery process. Organizations can:

  • Automate database change through version-controlled CI/CD workflows.
  • Stop risky changes before production with automated policy checks.
  • Govern changes made by humans and AI with the same policies and approvals.
  • Maintain an audit trail for database changes made by humans and AI agents.
  • Detect drift and out-of-band change across environments.
  • Recover faster with versioned change history and rollback context.

With Change Intelligence in Liquibase Secure, teams gain centralized visibility into database deployment activity, risk, drift, and policy outcomes across environments.

As software delivery becomes more autonomous, governance can’t depend on a human being in the loop. It has to be built into the path to production.

Availability

Liquibase Secure is available now in Google Cloud Marketplace and Microsoft Marketplace.

For more information about Liquibase Secure, visit Liquibase.com.

Leave a comment »

Nearly 14 million credentials exposed in public database

Posted in Commentary with tags on October 13, 2026 by itnerd

Cybersecurity researcher Jeremiah Fowler discovered a publicly accessible database containing 13.7 million credentials. The database appeared to be connected to Vibetech, an India-based AI software development and IT services company.

The exposed database contained:

  • Personally identifiable information (PII) linked to individuals worldwide, including names, phone numbers, email addresses, passwords, and bank account details.
  • Records that appeared to have been aggregated from previous security incidents.
  • Data that could not be matched to known public breach disclosures, suggesting additional or previously unknown datasets.

You can read Jeremiah’s full findings on ExpressVPN’s blog here: https://www.expressvpn.com/research/vibetech-data-exposed

Leave a comment »

Sauce Labs Announces Support for Apple’s Foldable iPhone Duo

Posted in Commentary with tags on October 13, 2026 by itnerd

Sauce Labs today announced plans to support Apple’s new foldable iPhone Duo, with advance device reservations now open ahead of the Duo’s Friday, Oct. 23, release date. With the new form factor, teams need to verify application correctness with the new layout and other device-specific characteristics before release. Sauce Labs customers can use AURA, the company’s release assurance platform, to automatically author, run, and analyze tests against iPhone Duo.

Phone Duo pairs a 5.4-inch outer display with a 7.6-inch folding display, which changes windowing, layout, and UI interaction models. Apps built for single-screen iPhones need validation before they reach users on the new device.

What’s available

  • Real and Virtual Device Clouds: Physical iPhone Duo devices and iPhone Duo simulators are available for automated and live testing.
  • Guidance and best practices: Expert advice on adapting apps to the foldable, dual-screen UI.

Enterprises across industries have already reserved private iPhone Duo device access to validate mission-critical applications before broad consumer adoption.

Customers interested in private device access can contact their Sauce Labs account team to coordinate ordering and onboarding.

Leave a comment »

DataBee Accelerates the Future ofCyber Risk Automation

Posted in Commentary with tags on October 13, 2026 by itnerd

DataBee®, a Comcast Company, today announced major advancements to its cyber risk management platform, including the next evolution of DataBee Continuous Controls Monitoring (CCM), new innovations in DataBee Frontier AI Defense, and expanded capabilities for DataBee User Access Review (UAR). Together, these advancements help organizations automate the manual work behind monitoring controls, assessing application exposures, and reviewing user access while reducing the cost, complexity, and effort required to manage cyber risk.

At the core of the announcement is a unique AI-native federated architecture that enables organizations to analyze cybersecurity data where it resides rather than first moving, normalizing, and consolidating it for analysis. While federated analytics has long been common in domains such as financial services and customer relationship management, cybersecurity data has historically been far more fragmented, heterogeneous, and difficult to analyze across systems.

Building on years of cybersecurity data expertise and a library of more than 340 connectors, DataBee has engineered new generative AI capabilities that can connect to structured, semi-structured, and unstructured security data, calculate key measurements, and retrieve only the information needed for analysis. The result is less implementation complexity, faster time-to-value, and quicker access to actionable cyber risk insights.

Reimagining Continuous Controls Monitoring

DataBee, a Comcast company, was included as a Sample Vendor in the Continuous Controls Monitoring category of the 2026 Gartner report, “Hype Cycle™ for Cyber-Risk Management, 2026”, 27 April 2026, Deepti Gopal, Pedro Pablo Perea de Duenas.

The next evolution of DataBee CCM applies new architecture to help organizations measure control effectiveness without a major data infrastructure project. AI-assisted connector creation accelerates onboarding, while flexible monitoring enables teams to define the controls, metrics, dashboards, and frameworks that matter most to their business. Users can then Ask DataBee questions about their security control posture to identify gaps, understand risks, receive recommendations for metrics to measure specific controls, and understand changes in control risks along with guidance on how to improve.

DataBee CCM provides explainable, rigorous, data-backed measurements and enables organizations to reuse control results across multiple regulatory, security, and business frameworks, creating a simpler path to continuous risk reporting and faster answers to cyber risk and compliance questions.

Beginning this quarter, select organizations can experience DataBee CCM through a complimentary two-week trial program. Organizations interested in early access can register now to secure a place in the program.

Frontier AI Defense: From Vulnerability Findings to Faster Remediation

Every vulnerability scanner can tell teams what is vulnerable. DataBee helps them understand what matters and who can fix it.

As AI-powered attacks accelerate exploitation, modern security teams are drowning in findings while struggling to answer three fundamental questions: How important is it? Who owns it? What should we do next? DataBee for Frontier AI Defense automatically connects vulnerabilities to the business-critical applications they affect, helping organizations quickly identify the responsible owners and accelerate remediation efforts.

DataBee’s proprietary, patent-pending entity resolution technology correlates and deduplicates information across scanners, CMDBs, application inventories, and operational systems to create a single record for each business application. By connecting vulnerabilities to the applications they impact and identifying the owners responsible for remediation, the solution helps organizations eliminate one of the most common causes of patching delays: determining who needs to take action. Combined with advanced analytics and business risk prioritization, this enables faster patching, smarter resource allocation, and measurable reductions in cyber risk.

Extending Identity Governance to Legacy Applications

User access reviews remain one of the most persistent challenges in identity governance. While many governance solutions focus on cloud and SaaS applications, organizations frequently rely on spreadsheets, manual processes, and ad hoc evidence collection to review access across mainframe, on-premises, and custom-built systems, leaving critical portions of the enterprise outside an automated governance process.

DataBee User Access Review closes this gap by identifying applications requiring review, establishing ownership, generating reviewer populations, and preserving the evidence and traceability needed for compliance and audit programs. By complementing existing identity governance investments, DataBee helps organizations extend governed access reviews across modern and legacy environments through a more complete and automated process.

Cybersecurity Awareness Month Webinar Series

To mark Cybersecurity Awareness Month, DataBee is hosting three educational webinars for CISOs, Cyber GRC leaders, and BISOs seeking to modernize their cyber risk management practices:


Gartner does not endorse any company, vendor, product or service depicted in its publications, and does not advise technology users to select only those vendors with the highest ratings or other designation. Gartner publications consist of the opinions of Gartner’s business and technology insights organization and should not be construed as statements of fact. Gartner disclaims all warranties, expressed or implied, with respect to this publication, including any warranties of merchantability or fitness for a particular purpose.

Hype Cycle is a registered trademark of Gartner, Inc. and/or its affiliates and is used herein with permission. All rights reserved.  

Leave a comment »

MoneyGram hack claimed by The Gentleman, 60M customers at risk

Posted in Commentary with tags on October 12, 2026 by itnerd

The Gentlemen ransomware gang has claimed an attack on MoneyGram, one of the world’s largest payment networks, and is threatening to release the stolen data. MoneyGram serves 60 million active customers across more than 200 countries. 

Rebecca Moody, Head of Data Research at Comparitech: 

“The Gentlemen has become one of the most prolific ransomware groups of recent years and isn’t known for fabricating its claims. MoneyGram needs to issue a statement as soon as possible to either reassure its customers that a breach hasn’t occurred or warn them of any potential unauthorized access to its systems.

Financial organizations are a key target for ransomware groups because of the highly sensitive data they deal with. The Gentlemen has claimed 46 attacks on such entities so far this year. 

Also of note is its attack on a South African tech company, MIP Holdings. This took place in June 2026, with MIP paying The Gentlemen a ransom to delete the stolen data. However, The Gentlemen has now started targeting MIP’s clients and is issuing them with their own ransom demand. This serves as a key reminder that paying a ransomware group to delete data doesn’t guarantee any data will be deleted. In MoneyGram’s case, regardless of whether or not negotiations are successful, individual customers could be contacted by the group. Therefore, MoneyGram’s customers and employees should be on high alert for any potential phishing messages and unauthorized account activity.”

Brian Higgins, Security Specialist at Comparitech:

“It’s very early in the incident response timeline but that’s no reason for anyone who may be affected should this attack prove genuine not to be extra vigilant whilst more details become available. It’s not MoneyGram’s first rodeo so there’s a good chance they will be able to offer decent information and advice as things progress, so it would be a good idea to monitor their comms output. Unfortunately these days more and more people are aware of the personal mitigations they should be considering; changing passwords, monitoring accounts, ignoring and reporting unsolicited contact and checking they have two-factor authentication applied wherever possible etc, but given the volume and diversity of the potentially vulnerable client base on this occasion it’s worth checking in with family, friends and others in your community to make sure they are doing the same. Nobody wants to be worried about their personal financial info being compromised going into Thanksgiving and Christmas so it can only help to look after each other where you can.”

Comparitech in August published a study of The Gentleman ransomware, which can be read here: https://www.comparitech.com/news/the-gentlemen-ransomware-stats-on-attacks-ransoms-data-breaches/

Leave a comment »

Inside ICMacOS: From an Infostealer to a Persistent RAT

Posted in Commentary with tags on October 12, 2026 by itnerd

SOCRadar researchers have just published a new analysis of ICMacOS (also marketed as Icarus macOS), a Malware-as-a-Service infostealer for macOS that has been actively advertised on Russian-speaking cybercrime forums, including XSS, Exploit.in, and Rehub, since early September 2026.

Key findings include:

  • Rapid evolution: Within weeks of its public launch, ICMacOS moved from one-shot credential and wallet theft to a persistent remote access trojan, adding LaunchAgent persistence and a live WebSocket-based shell that lets operators run commands on infected Macs in real time
  • Developer and enterprise exposure: The malware specifically harvests SSH keys, AWS, Kubernetes and cloud CLI credentials, Git tokens, and .env files, creating a potential pathway from a single compromised Mac into broader enterprise infrastructure and the software supply chain
  • Convincing social engineering: ICMacOS is delivered through ClickFix pages that trick victims into pasting terminal commands, then displays a fake “System Preferences” dialog to capture the user’s login password and validates it against the local Keychain
  • Wide collection scope: Targets include browser credentials and cookies across Chromium, Safari, and Firefox, 29 browser extensions covering crypto wallets and password managers, desktop crypto wallets, the macOS Keychain, Telegram, WhatsApp, Discord, iMessage, and Apple Notes; the latest version adds Steam, Outlook, clipboard contents, and additional password managers
  • Commercial operation: The stealer is sold by an actor using the handle GlowComa, operating under the MADHASH crypto-draining affiliate group, at $699 per week, $1,199 every two weeks, or $1,699 per month, and it is configured to avoid infecting systems in Russia and CIS countries

For full details, the analysis can be found here: https://socradar.io/blog/icmacos-infostealer-rat/

Leave a comment »

Amazon Fire TV Cube hacked using 4-year-old vulnerability

Posted in Commentary with tags on October 12, 2026 by itnerd

Amazon’s Fire TV Cube 3rd Gen has been hacked using a four-year-old GPU vulnerability, allowing users to gain complete control over the device, Cybernews reports.

The discovery has sparked excitement among home theater enthusiasts, who are exploiting the flaw to turn the Cube into a powerful media player. However, the same vulnerability could also pose security risks.

Here are the key findings:

  • The vulnerability (CVE-2022-38181), rated 8.8/10 in severity, allows arbitrary kernel code execution and root access.
  • ARM patched the flaw in August 2022, two months before the Fire TV Cube 3rd Gen was released.
  • Enthusiasts are using the exploit to install custom operating systems, remove Amazon’s software, and unlock advanced video and audio playback capabilities.
  • Attackers could potentially exploit the vulnerability to spy on users, steal data, or incorporate devices into botnets, although there’s no evidence of active exploitation in the wild.

Amazon told Cybernews that the demonstrated method poses little risk to customers, as it requires physical access and deliberate, multi-step modifications. The company says it’s reviewing the details and will take appropriate action if needed.

You can read the full story here: https://cybernews.com/security/amazon-fire-tv-cube-root-exploit-enables-full-unlock/ 

Leave a comment »

Park Place Technologies Extends Microsoft Cloud Capability Across U.S. and Canada

Posted in Commentary with tags on October 12, 2026 by itnerd

Park Place Technologies has extended its Microsoft Cloud Solution Provider (CSP) capability for Microsoft Azure to customers across the United States and Canada. This extension brings a cloud practice already established in Europe to two of the company’s largest and fastest-growing markets.  

Park Place Technologies is now able to license, provision, support and manage Microsoft Cloud services for customers throughout the United States and Canada, with support for Microsoft 365, Azure, Azure Virtual Desktop (AVD) and Microsoft’s broader business, data and AI platforms. 

The significance of this expansion is what it enables for customers: a more direct, accountable path to Microsoft cloud and applications. It also empowers customers to make enhanced infrastructure decisions with the support of a partner that already understands their estates.  

Park Place has built its reputation by supporting complex, business-critical infrastructure for more than 35 years, a foundation that remains a key advantage as customer estates become more hybrid, distributed and outcome-driven. The company’s cloud practice is underpinned by a firm commitment to continuously innovate, expand and add new routes to value without losing sight of the infrastructure realities customers depend on daily. 

Bringing CSP capability in-house removes a layer of complexity for customers and puts Park Place’s own engineers and account teams behind every Azure engagement, from design through ongoing support.  

For customers in the U.S. and Canada, Park Place’s CSP capability includes cost optimization and management, security and identity services and managed cloud operations across Azure Virtual Desktop, Microsoft 365, SQL, Dynamics and Copilot. This complements the company’s broader Microsoft competencies, supporting the full journey from migration and modernization planning to ongoing Microsoft environment support. It also strengthens Park Place’s broader Infrastructure Managed Services and Software Technical Support portfolio solutions, allowing customers to leverage a single partner for cloud, Microsoft environments and the infrastructure that supports them. 

Park Place’s expanded Microsoft Cloud Solution Provider CSP capability is available now to customers and partners across the United States and Canada. Organizations interested in learning more can contact their Park Place representative or visit ParkPlaceTechnologies.com. 

Leave a comment »

From a Japanese cloud outage to Gorton’s parent company: the hidden supply chain risk for U.S. firms

Posted in Commentary with tags on October 9, 2026 by itnerd

A ransomware attack against a SoftBank-owned cloud provider in Japan has affected 495 companies and local governments, and the impact is expanding beyond the original infrastructure outage.

JR East has now disclosed approximately 6.09 million potentially exposed customer records across its group. Nissui, which operates major U.S. seafood businesses including Gorton’s, has confirmed disruptions to its Japanese logistics subsidiary. No direct U.S. disruption has been established.

The next development to watch is which additional customers disclose incidents as investigations continue.

John Watters, Founder & CEO, iCOUNTER | Former President & COO, Mandiant Said This:

“One ransomware attack against a cloud provider in Japan has put 495 companies and local governments at risk, with JR East already reporting approximately 6.09 million potentially exposed customer records. And this story is far from over. As more organizations investigate their exposure, we should expect additional disclosures that reveal just how far a single attack can reach.

This isn’t just a Japan problem. It’s a warning to American businesses about the dependencies hiding inside their supply chains. Nissui, one of the affected organizations, has significant U.S. operations, illustrating how interconnected these ecosystems have become, even though no impact on its American operations has been confirmed.

What concerns me most is that many organizations won’t know they’re exposed until a vendor tells them. By then, critical decisions about data protection, business continuity, and recovery may already be overdue.

Every CISO should be asking three questions right now: Which of our vendors and their suppliers depend on the affected infrastructure? Is our data exposed? And what is our response plan if those services go down?

Traditional third-party risk assessments tell you whether a vendor met security requirements at a point in time. They don’t tell you when that vendor, or a supplier behind it, is actively under attack.

The next breach notification shouldn’t be the first time you discover your organization was at risk. Security teams need to identify threats across their extended ecosystem, determine what matters to their business, and act before a supplier’s incident becomes their own.”

With everything being interdependent on everything else, you’re only as secure as the guy next to you. Thus need to make sure that the guy next to you is secure to your standards and not theirs.

Leave a comment »

« Older Entries