New 2026 Global Incident Response Report from Unit 42

Posted in Commentary with tags on February 17, 2026 by itnerd

Unit 42 has published its annual Global Incident Response Report (full report available here).The report spotlights key trends from over 750 major cyber incidents managed by Unit 42 across 50 countries, and provides actionable guidance to defend against emerging and notable attack techniques.

Key data from this year’s report: 

  • AI has become a force multiplier for threat actors – Attackers moved from AI experimentation to operationalization. Unit 42 saw that with AI, exfiltration speeds for the fastest attacks increased from nearly 5 hours to just 72 minutes (a 4x increase).
  • Identity drives initial access –Identity weaknesses played a material role in nearly 90% of our investigations. Agentic identity management makes this challenge even more complex as non-human identities are often over-privileged and inconsistently monitored.  65% of initial access is driven by identity-based techniques such as social engineering, while vulnerabilities account for 22% of initial access in all attacks. 
  • Software supply chain risk has expanded to include the misuse of trusted connectivity. Attacks involving third-party SaaS applications have surged 3.8x since 2022, accounting for 23% of all attacks, as threat actors abuse OAuth tokens and API keys for lateral movement.
  • Attack complexity is increasing – 87% of intrusions span multiple attack surfaces, with as many as 10 in some complex investigations. Threats are rarely confined to a single environment, and attackers often coordinate actions across endpoints, networks, cloud services, SaaS platforms, and identity systems. This creates complexity by forcing defenders to keep visibility across all of these areas simultaneously.
  • The browser is a primary battleground – Nearly 48% of incidents included browser-based activity. That reflects how often modern attacks intersect with routine workflows like email, web access, and day-to-day SaaS use, turning normal user behavior into an attack vector.
  • Extortion is moving beyond encryption – Encryption-based extortion declined to 78% of incidents, down from 92% the year before, as more attackers skip encryption and move straight to data theft and disruption. From the attacker’s perspective, it’s faster, quieter, and creates immediate pressure without the signals defenders once relied on to detect ransomware attacks.

Additionally, Palo Alto Networks announced Managed XSIAM 2.0 (MSIAM) the managed evolution of Cortex XSIAM SOC transformation platform. As the Incident Response Report highlights, attacks can now unfold in under an hour, and MSIAM delivers 24/7 AI-driven SOC operations with continuous and high-speed threat hunting, response, and remediation.

Leave a comment »

Elasticsearch Instances Expose 43M+ Records Including Credentials, Credit Cards, and Customer Data

Posted in Commentary with tags on February 17, 2026 by itnerd

SOCRadar researchers announced the identification of three publicly accessible and misconfigured Elasticsearch instances leaking highly sensitive data, including infostealer logs, credit card information, and millions of personal identity records.

The exposed databases contained more than 43 million records, including over 5 million valid credentials, thousands of credit cards, and large-scale PII and commercial transaction data. All three cases demonstrate how misconfigured Elasticsearch services continue to create immediate and exploitation-ready risks for organizations and individuals.

Key findings include: 

  1. Incident 1: 7.2 million infostealer logs and 24, 000 credit cards exposed
  2. Incident 2: 35 million Italian PII records publicly accessible
  3. Incident 3: 1.5 million customer records and commercial data exposed

The security team analyzed the exposed instances, notified relevant parties, and assessed the potential impact. The full details of this can be read here: https://socradar.io/blog/elasticsearch-instances-43m-records-data/

Leave a comment »

Microsoft and Ericsson bring enterprise-grade 5G laptop management to Windows 11

Posted in Commentary with tags on February 17, 2026 by itnerd

Ericsson has announced a major joint Microsoft-Ericsson development in enterprise mobility – the integration of advanced 5G capabilities directly into Windows 11. The transformative results mean enterprises worldwide – and their workforces – stand to benefit from secure, policy-driven laptop connectivity, simplifying how IT departments manage, protect and scale mobile PC fleets.

The joint solution combines Microsoft Intune device management with Ericsson Enterprise 5G Connect (formerly Ericsson Enterprise Virtual Cellular Network – EVCN) – an AI- and cloud-analytics-powered platform that continuously monitors network quality and automatically adjusts connectivity for best performance and security.

The embedding of AI-based 5G management into Windows 11 enables IT teams to automate how devices connect, seamlessly switch between communications service providers’ (CSPs) networks, and apply in-house enterprise policies.

Through Microsoft Intune and Ericsson Enterprise 5G Connect, IT teams can automatically enforce secure connectivity profiles and enterprise policies across every 5G-connected device, minimizing manual setup while ensuring consistent, compliant user experiences everywhere employees work.

Such automation capabilities remove long-standing challenges in adopting cellular-connected laptops – minimizing manual setup and ensuring consistent user experience across locations and service providers.  The new capabilities also reduce IT overheads and provide enterprises with a predictable, secure pathway to tap modern mobility capabilities – powered by the most secure and cloud‑integrated version of Windows.

Building on Microsoft and Ericsson’s long-standing collaboration to bring managed 5G connectivity to the enterprise workspace, today’s announcement follows several successful multi-market pilots. In collaboration with CSPs and other global partners, Microsoft and Ericsson will deliver enterprise 5G bundles, starting with Surface Copilot+ PCs, Microsoft 365 and Intune, Ericsson Enterprise 5G Connect.

In addition to demonstrating solution capabilities, Microsoft and Ericsson will give attendees at MWC Barcelona 2026 – the world’s largest mobile connectivity expo – exclusive insights to future solution capabilities that are set to become part of the solution.

Experts will showcase the joint solution and its new features: to remotely set network policies for 5G as priority; the automatic switching of eSIMs; and the local AI agent running on a Surface 5G laptop to make intelligent, context-aware decisions in real time. This will show connectivity performance is optimized to ensure consistently smooth, reliable performance for high-value business workflows.

The joint solution is now available to enterprises in key markets: in the United States with T-Mobile; in Sweden with Telenor; in Singapore with Singtel; and in Japan with SoftBank Corp. Similar launches will follow during 2026 in other markets, including in Spain with MasOrange; in Germany with O2 Telefónica Germany; and in Finland with Elisa.

Related link: Ericsson Portfolio: Ericsson Enterprise 5G Connect

Leave a comment »

DryRun Security Appoints Andrew Peterson to Board of Directors

Posted in Commentary with tags on February 17, 2026 by itnerd

DryRun Security today announced the appointment of Andrew Peterson as the newest addition to its Board of Directors, effective immediately. 

Andrew Peterson is a distinguished cybersecurity entrepreneur, technologist and investor with a proven track record of building category-defining security companies. As co-founder of Signal Sciences, Peterson helped pioneer a modern approach to web application and API security, guiding the company through rapid growth, deep enterprise adoption and its successful acquisition by Fastly in 2020. Most recently, Peterson founded Aviso Ventures, an early-stage fund focused on enterprise and infrastructure software,  where Fund I has emerged as  a top performer. His portfolio includes near unicorn AI security companies such as Protect AI, acquired by Palo Alto Networks in 2024, and SGNL.ai, acquired by CrowdStrike earlier this year. Across roles, Peterson brings an invaluable operator’s perspective, helping technically ambitious teams translate security innovation into durable, category-defining businesses. 

Since emerging from stealth, DryRun Security has quickly established itself as a leader in AI-native code security intelligence through breakthrough product innovation, original research, and accelerating customer adoption. DryRun Security also helps teams defend against shadow AI coding by providing policy-driven visibility into agentic code changes and sources. With enterprise and mid-market customers now executing more than 250,000 code reviews per month, DryRun is setting a new standard for securing modern, AI-driven software development.

Leave a comment »

Sage Intacct delivers new AI-powered capabilities to transform how finance teams close, analyze, and act on financial data

Posted in Commentary with tags on February 17, 2026 by itnerd

Sage today announced new AI-powered capabilities in Sage Intacct designed to help finance teams move from managing data to driving performance. The latest updates strengthen Sage Intacct across close analytics, workflow automation, cash intelligence, and connected data access. 

Today, finance teams using these tools can identify which entities are slowing down the close, import complex datasets without spreadsheet manipulation, and monitor their cash position in real time. This reduces the need to switch between systems and helps teams stay focused on analysis, control and timely decision making.

According to Gartner, 59% of finance organizations now use AI, and 67% of those users are more confident in its value than they were a year ago. Sage Intacct’s latest updates build on that momentum by embedding AI into everyday workflows, reducing manual effort where it most often slows teams down.

Driving the next era of high-performance finance

From AI-powered close analytics and cash intelligence to direct access to trusted finance data and a growing network of intelligent Agents, Sage Intacct is delivering on its vision for High-Performance Finance. These innovations help finance teams simplify complexity, improve control, and focus more time on strategic work.

By connecting insight and action across close, cash, billing, and analytics, Sage Intacct helps finance leaders understand what’s happening across the business and respond faster when it counts.

What’s new in Sage Intacct R1 2026:

Finance Intelligence Agent
The Finance Intelligence Agent expands Sage Intacct’s growing network of AI Agents, allowing finance teams to ask natural language questions and receive instant, actionable answers that combine data, analysis, and recommendations. Working alongside existing Close, AP, Time, and Assurance Agents, it helps finance leaders move from reporting to insight in seconds.

Available to Early Adopters in the US, UK and Canada.

Close Automation: Close Analytics
This new AI-powered capability introduces insight into close performance through interactive charts, historical trends, and bottleneck detection. Finance teams can track days-to-close across entities and periods, identify recurring handoff issues, and improve close consistency and control.

Available to Early Adopters in the US and UK.

Cash Intelligence

Cash Intelligence provides a single-screen view of short-term cash position, expected requirements, and forecasted changes. AI-driven insights and predictions help finance teams identify potential shortfalls, prioritize payments, and make more informed cash decisions by bringing bank balances, payables, and payroll into one clear view.

 Early Adopter availability with phased regional rollout.

Customer Payment Services powered by Fortis
Customer Payment Services, powered by Fortis, introduces a secure, self-service experience for customers to make electronic payments. Instant settlement and automated reconciliation reduce manual AR work and improve cash visibility for finance teams.

Available to Early Adopters globally.

AP Automation: AI Line-Level Matching
Line-level matching uses AI to improve accuracy by matching invoice lines directly to purchase order lines and flagging discrepancies earlier in the process. This reduces rework, speeds up approvals, and gives finance teams greater confidence before payment.

Available globally.

AI-powered import agent
The AI-powered Import Agent simplifies complex data imports using natural language transformations and flexible mapping. Finance teams can split, join, and reuse fields, preview changes in real time, and roll back instantly, reducing risk and eliminating the need for external tools or manual manipulation.

Available globally.

Sage Intacct Data Cloud
Sage Intacct Data Cloud provides governed, direct access to Intacct data in Snowflake with zero ETL and no data duplication. Finance and analytics teams can query live financial data using SQL or BI tools such as Power BI and Tableau, enabling advanced analytics and AI use cases without adding operational complexity.

Available globally.

Leave a comment »

Mobile Apps Are the New Attack Surface as 72% of Organizations Are Hit by Mobile App Security Incidents

Posted in Commentary with tags on February 17, 2026 by itnerd

 Guardsquare, the leading provider of mobile application security, today released its analysis of new independent research conducted by TrendCandy, revealing a widening “client-side trust gap” that is leaving organizations exposed to mobile app security incidents, customer churn, and backend API abuse.

The global survey of 1,360 mobile app developers and security leaders found that 72% of organizations experienced at least one mobile app security incident in the past year, and 65% reported customer churn or app uninstalls as a direct result of security issues. Despite these impacts, many organizations continue to rely on outdated, OS-level security assumptions that fail to protect mobile apps operating “in the wild.”

Speed Pressure and AI Are Compounding Risk

The analysis highlights how development velocity and AI adoption are accelerating mobile app risk:

  • 79% of respondents cite time-to-market pressure as the top barrier to stronger mobile app protection, reinforcing persistent misconceptions that security slows development.
  • 96% of developers report using AI-assisted tools to build mobile apps and SDKs.
  • 81% say AI-generated code has introduced new vulnerabilities.
  • More than half of developers report uncertainty around how to properly secure AI-written mobile applications.

From Tradeoffs to a New Mobile Security Standard

The research points to a clear shift in how organizations are approaching mobile security:

  • 91% of respondents prefer security that spans the entire software development lifecycle (SDLC).
  • 96% of organizations using multi-layered protection report fewer mobile app security incidents.

Guardsquare’s analysis concludes that closing the client-side trust gap requires integrated mobile app security that combines automated testing, multi-layered code protection, runtime defenses, mobile API security, and continuous threat monitoring, all without compromising development speed or app performance.

Guardsquare’s full analysis and recommendations are available in the ebook, Gaining Ground on Mobile DevSecOps, available for download at: https://www.guardsquare.com/gaining-ground-on-mobile-devsecops

About the Research
The research, The Rise of Client-Side Risk and the Trust Gap, was conducted by the independent firm TrendCandy and commissioned by Guardsquare. It surveyed 1,360 mobile app developers and security leaders globally, with a margin of error of ±2% at the 95% confidence level.

Leave a comment »

Nikon Introduces Ultra Compact SPORTSTAR EX II Binoculars

Posted in Commentary with tags on February 17, 2026 by itnerd

Nikon Vision Co., Ltd., (Nikon Vision), a subsidiary of Nikon Corporation (Nikon), announced the release of the new SPORTSTAR EX II binoculars. These binoculars improve upon the original “SPORTSTAR” models which were made popular for their small size, durable build and versatile optics.

The SPORTSTAR EX II series is available in two models: 8×25 and 10×25. Featuring a waterproof, compact fold-up design, these binoculars are easy to carry without adding bulk to your bag — ideal for outdoor activities, travel, and everyday outings. Additionally, both models offer a comfortably wide field of view, allowing users to easily acquire and observe subjects at a distance.

The exterior has been completely renewed to combine an advanced design with the excellent operability and handling. The easy-to-grip, ultra-light and ergonomic design ensures reliable performance and comfortable ease of use, even in active situations.

The SPORTSTAR EX II models are compact binoculars that provide outstanding portability and high optical performance in a newly refined design, making them the ideal compact binoculars for a wide range of uses, including outdoor activities and travel. Now, users will be able to enjoy more comfortable, accessible observation than ever before.

Key Features of the SPORTSTAR EX II

  • Easy-to-grip, advanced ergonomic design realizing excellent operability
  • Waterproof structure with nitrogen-filled body for reliable outdoor use
  • Delivers an immersive viewing experience with a wide field of view. In particular, the 8×25 model features a wide apparent field of view of 60.3°
  • Compact, lightweight fold-up design for excellent portability
  • Multilayer-coated lenses provide a bright and clear field of view
  • Turn-and-slide rubber eyecups facilitate easy positioning of eyes at the correct eyepoint
  • Rubber armouring for shock resistance and a firm, comfortable grip
  • Aluminum alloy body for enhanced durability

Price and Availability

The new Nikon SPORTSTAR EX II series of Binoculars will be available in early March 2026 for the following manufacturer’s suggested retail pricing (MSRP): $139.95* for the SPORTSTAR 8×25, and $149.95* for the SPORTSTAR 10×25.

For more information about current Nikon products, please visit www.nikon.ca.

Specifications

SPORTSTAR EX II 8×25SPORTSTAR EX II 10×25
Magnification (×)810
Effective diameter of objective lens (mm)2525
Angular field of view (real) (˚)8.36.5
Angular field of view (apparent) (˚)*160.359.2
Eye relief (mm)1010
Length (mm/in.)100/3.9100/3.9
Width (mm/in.)114 (69) *2 / 4.5 (2.7) *2114 (69) *2 / 4.5 (2.7) *2
Depth （㎜/in.）44 (55) *2 / 1.7 (2.2) *244 (55) *2 / 1.7 (2.2) *2
Weight (g/oz.)310 / 10.9310 / 10.9

Specifications, equipment, and release dates are subject to change without any notice or obligation on the part of the manufacturer.

Every effort has been made to ensure specifications and claims are accurate, but they may be subject to change without any notice or obligation on the part of the manufacturer.


*MSRP (Manufacturer’s Suggested Retail Price) listed only as a suggestion. Actual prices are set by dealers and are subject to change at any time.


*1: Apparent field of view: Apparent field of view is calculated based on the ISO14132-1:2015 standard.


*2: Folded.

Leave a comment »

Operation DoppelBrand: Weaponizing Fortune 500 Brands for Credential Theft and Remote Acces

Posted in Commentary with tags on February 16, 2026 by itnerd

SOCRadar threat researchers have publishing an in-depth analysis of an ongoing cyber campaign against Fortune 500 companies including names such as Wells Fargo and USAA, by the threat actor known as GS7. 

GS7 has been active for years, rotating its infrastructure and impersonating legitimate portals, and has amassed hundreds of malicious domains tied to its modus operandi. Its campaigns include operations targeting banking institutions, technology companies, payment platforms, and other entities.

The elements that distinguish this actor and its campaigns are the creation of highly similar portals used in phishing operations to redirect victims toward credential theft.

The research dives into: 

How GS7 has quietly operated for years by rotating infrastructure and impersonating trusted Fortune 500 brands

Hundreds of malicious domains tied to GS7’s phishing ecosystem and how they’re deployed at scale

The use of near-identical, brand-spoofed portals designed to convincingly harvest credentials

Active campaigns targeting banks, financial institutions, technology companies, and payment platforms

The actor’s infrastructure rotation tactics and evasion techniques

Which industries, regions, and countries are being targeted most heavily

What makes this campaign distinct from typical phishing operations — and why it continues to succeed

You can read the research here: https://socradar.io/resources/whitepapers/operation-doppelbrand-fortune-500-access

Leave a comment »

Tech from Samsung that brings students and families together 

Posted in Commentary with tags on February 13, 2026 by itnerd

Reading Week and Family Day are more than a break from routine; they’re a moment when students reset, families reconnect, and shared spaces (and screens) get a lot more use. From catching up on coursework to movie nights and low-key productivity, Samsung Galaxy devices are designed to flex with real life during time off together. 

Whether your readers are heading home for Reading Week or planning a cozy Family Day weekend, here are a few Samsung Galaxy devices that fit naturally into this mid-winter pause: 

  • For Shared Study & Everyday Use: Galaxy Tab A11+ 
    The Galaxy Tab A11 is a go-to device for households balancing schoolwork, entertainment and everyday tasks. Its large display makes it easy for students to review notes or stream lectures during the day, then switch to reading, gaming or family movie nights in the evening, all at a value-friendly price point ideal for shared use. 
  • For Immersive Learning & Downtime: Galaxy Tab S11 
    For families or students looking for a more premium tablet experience, the Galaxy Tab S11 offers a powerful screen for studying, creative projects and streaming. Galaxy AI tools like Circle to Search make it easy to move between learning and discovery, whether you’re prepping for exams or planning your next break. 
  • For Productivity Between Classes: Galaxy Book4 Edge 
    Reading Week often doubles as a productivity reset. The Galaxy Book4 delivers lightweight performance for students tackling assignments, virtual meetings or creative projects, whether at home, on campus or at the kitchen table alongside family. 
  • For Shared Entertainment Moments: Galaxy Z Fold7  
    From movie marathons to background music while studying or hosting Family Day get-togethers, the Galaxy Z Fold7 elevates shared entertainment with rich sound that brings everyone into the moment. 

All products are available for purchase at Samsung.com/ca.

Model  Link  Price  
Galaxy Z Fold7  Galaxy Z Fold7 Product Image  $2499.99 CAD  
Galaxy Tab A11+  Galaxy Tab A11+ Product Image  $449.99 CAD  
Galaxy Tab S11  Galaxy Tab S11 Product Image  $1,349.99 CAD  
Galaxy Book4 Edge  Galaxy Book4 Edge Product Image  $999.99 CAD  

Leave a comment »

Sharp Expands Audio Portfolio in Canada

Posted in Commentary with tags on February 13, 2026 by itnerd

 Sharp Electronics of Canada Ltd. today announced the expanded availability of its consumer audio portfolio in Canada, introducing a comprehensive range of portable and party speakers, headphones, mini component systems, soundbars, and surround speakers designed for exceptional sound quality, seamless connectivity, and an immersive home entertainment experience.

Designed to fit every lifestyle, from on-the-go listening and social gatherings to immersive home theatre experiences, Sharp’s latest audio lineup combines bold performance, modern connectivity, and intuitive features that make great sound easy and accessible.

Sharp Electronics of Canada Ltd. is bringing its consumer audio products to Canadian customers through Randmar, its authorized distributor. Select models will arrive in stores starting January 2026, with more rolling out through Q1. Randmar, a leading Canadian distributor with deep expertise in consumer electronics and a strong retail network, will ensure Sharp’s products are widely available and supported across the country.

The expanded Sharp audio portfolio includes the following:

  • Party Speakers delivering powerful sound, rechargeable batteries, karaoke functionality with included microphones, and dynamic LED and strobe lighting to energize any gathering.
  • Portable Bluetooth® Speakers built for fun and durability, featuring IP67 waterproof and floating designs, long battery life, True Wireless Stereo (TWS) pairing, RGB lighting, and Bluetooth® connectivity.
  • Headphones and Earphones, including over-ear, bone conduction, and true wireless options, offering extended playtime, hands-free calling, and lightweight comfort for everyday and active use.
  • Mini Component Systems that blend modern streaming with classic CD, USB, and auxiliary playback- delivering bold sound with a touch of nostalgia.
  • Soundbars and Surround Speakers designed to elevate home entertainment with powerful output, wireless subwoofers, Dolby Audio™and Dolby Atmos® support, and flexible connectivity including HDMI ARC/eARC and Bluetooth®.

Availability

Sharp’s consumer audio products are available in Canada through authorized distribution, with select models arriving beginning in January 2026 and additional products rolling out through Q1 2026.

Leave a comment »

« Older Entries
Newer Entries »