Cybersecurity

Siemba Automates IDOR Testing Across Full API Collections

Atlanta – September 20, 2026 -- Siemba has launched automated testing for insecure direct object reference (IDOR) flaws, cutting the time to scan a 200-endpoint API collection to under an hour, a task the company says has typically taken human testers days or weeks.

IDOR ranks first among OWASP's API Security Top 10 risks

IDOR, classified by OWASP as broken object level authorization, occurs when an endpoint fails to verify that a caller-supplied identifier belongs to them, allowing a single changed number in a request to expose another user's data. Siemba's Chief Security Officer Sandhya Prashanth said the flaw "drives a huge share of real-world breaches" and requires little more than systematic testing across every endpoint to detect.

Siemba Named in Three Gartner Hype Cycle Reports for Third Straight Year

Atlanta – September 20, 2026 -- Siemba, an offensive security provider, has been named a Sample Vendor for Penetration Testing as a Service (PTaaS) in three separate 2026 Gartner Hype Cycle reports, marking the third consecutive year the company has secured this recognition across all three publications.

Siemba earns placement across security operations, application security and XaaS research

The company was cited in the 2026 Hype Cycle for Security Operations, the Hype Cycle for Application Security, and the Hype Cycle for XaaS. The Security Operations report examines the growth of Continuous Threat Exposure Management (CTEM) as a priority for enterprise security teams, while the Application Security report covers how AI transformation and agentic applications are reshaping enterprise risk. The XaaS report addresses the shift toward platform-driven, everything-as-a-service consumption models in IT.

Arcjet Launches Runtime Security Product for Production AI Agents

San Francisco – – September 19, 2026 -- Arcjet has launched agent runtime security, a new product designed to give engineering and security teams visibility and control over AI agents operating inside production systems. The platform targets agents that read and write to databases, process refunds, call APIs, and take autonomous actions across multiple systems on behalf of users.

Arcjet builds its product around three functions: observe, enforce, and audit

The observe layer lets teams ingest agent activity without changing application code, using existing OpenTelemetry tooling or, for Claude users, the Claude Compliance API. Arcjet connects actions across sessions into a single workflow view, capturing prompts, tool call parameters, session metadata, identity, and security decisions, and maintains an inventory of agents and applications running in a given environment.

Qtonic Quantum Launches QShield After 4,107-Check Endurance Test

Miami – – September 19, 2026 -- Qtonic Quantum Corp launched QShield, a software-only post-quantum packet runtime for Linux hosts, and opened paid, operator-led engagements to enterprise and government buyers following a completed 72-hour endurance run that logged 4,107 successful periodic checks and zero failures.

QShield Launches With a Published, Verifiable Test Record

The September 13-16 endurance run connected two Linux hosts across separate AWS availability zones in Oregon, checking connectivity, service status and a 64 KiB transfer roughly every 63 seconds. All 4,107 checks reported success, zero ping loss was recorded, and both daemon paths hashed to the identified build at harvest with zero restarts. The 72-hour gate closed at 04:29 UTC on September 16, and the operator left the overlay running. Qtonic published the run log, build hash, checksums and a verifier that passes 11 of 11 checks so buyers can inspect the result independently.

Leidos Wins Corrected $926M Navy Network Contract Option Year

Reston, Va. – September 19, 2026 -- The U.S. Department of the Navy has awarded Leidos $926 million for the second option year of its Next Generation Enterprise Network Service Management, Integration and Transport contract, correcting an earlier figure of $875 million issued in a prior release.

Leidos secures $926 million to manage networks for 650,000 Navy and Marine Corps personnel

Under the award, Leidos will continue managing more than 425,000 devices across over 2,500 sites worldwide, supporting user access, IT operations and transformation activities on the Navy Marine Corps Intranet (NMCI), the Outside the Continental United States Navy Enterprise Network (ONE-Net) and the Marine Corps Enterprise Network (MCEN).

First Health Advisory Launches Resilience360 for Hospital Continuity

Washington – September 18, 2026 -- First Health Advisory has launched Resilience360, a consulting program designed to validate whether hospitals and health systems can keep clinical operations running during cyberattacks, technology outages, third-party failures, and natural disasters.

Program targets the gap between disaster recovery plans and actual clinical continuity

Healthcare organizations have invested heavily in disaster recovery, incident response, and emergency preparedness, but many have not validated how clinical and operational workflows will continue functioning while systems are being restored, according to First Health Advisory. Resilience360 is built to close that gap by testing the people, processes, and workflows required to sustain patient care throughout a disruption, rather than adding another compliance framework.

Globee Awards Opens Nominations for 23rd Cybersecurity AI Honors

San Francisco – – September 18, 2026 -- The Globee Awards has opened nominations for its 23rd Annual Globee Awards for Cybersecurity, calling on organizations and professionals worldwide to submit artificial intelligence security achievements for evaluation.

Program targets both AI-driven defense and AI system protection

The awards accept entries covering two distinct fronts: the use of AI to strengthen cybersecurity operations, and the protection of AI systems, models, data, and infrastructure themselves. Eligible categories span AI-powered threat detection, fraud detection, identity security, automated incident response, vulnerability management, cloud security, security analytics, AI governance, model security, and agentic AI security.

Datalink Networks Completes SOC 2 Type 2 Cybersecurity Audit

Santa Clarita, Calif. – September 18, 2026 -- Datalink Networks has completed its SOC 2 Type 2 examination as of August 27, 2026, providing independent verification of the security controls underpinning its IT managed and consulting services.

Audit confirms controls met AICPA Security Trust Services Criteria

The examination, conducted by compliance assessor A-LIGN, evaluated Datalink's security, risk management, access controls, monitoring, incident response, and change management practices. Auditors reviewed controls operating from April 1, 2026, through June 30, 2026, and found them suitably designed and operating effectively throughout the period.

OX Security Launches OX Cloud to Secure AI Agents in Production

New York – September 18, 2026 -- OX Security launched OX Cloud, a cloud security platform built to monitor AI agents that now operate autonomously in production environments, access sensitive data and call tools without human oversight.

OX Cloud adds AI Detection and Response to track agent behavior in real time

The platform's AIDR capability detects and governs AI activity across cloud and runtime environments as it happens, rather than relying on static configuration snapshots. Traditional cloud security tools identify misconfigurations, vulnerabilities and excessive permissions but cannot show security teams what an AI agent is actually doing once it operates inside an environment.

Harness WAAP Named Leader in SecureIQLab's 2026 Cloud Security Test

San Francisco – September 18, 2026 -- Harness Web Application & API Protection (WAAP) scored a 99.8% Security Efficacy rating and 98.2% Operational Efficiency rating in SecureIQLab's Cloud WAAP v5.0 CyberRisk Validation Comparative Report, earning Leader status among 12 tested vendors.

Harness is one of only five vendors meeting both Secure by Design and Secure by Default criteria

SecureIQLab tested 12 leading Cloud WAAP vendors, with just six achieving Leader status. Harness was among only five vendors to satisfy both the Secure by Design and Secure by Default criteria, a distinction it also held in 2025 when its solution was evaluated under the Traceable by Harness name in the Cloud WAAP v4.0 report.