Cybersecurity

San Francisco – September 18, 2026 -- Corelight has launched the Agent Builder Library and Natural Language Query, two tools designed to let security operations centers match the speed of AI-driven cyberattacks without losing auditability over investigation logic.

Attackers now exploit vulnerabilities in roughly five days, far outpacing patch cycles

Enterprise patching cycles typically run 60 to 150 days, but the median time to exploit has dropped to approximately five days, according to Corelight. The company warns that with emerging Mythos-class AI models, attackers may exploit vulnerabilities before defenders even know a flaw exists, making faster patching an inadequate defense on its own.

New York – September 17, 2026 -- Zip Security has joined Project QuiltWorks, the CrowdStrike-led coalition defending organizations against frontier AI-driven cyber risk, extending enterprise-grade protection to small and mid-sized businesses that lack dedicated security teams.

Frontier AI models have cut attack costs while defense costs stay flat for SMBs

Frontier AI has changed the economics of cyber risk, giving attackers tools to discover software vulnerabilities that earlier reviews missed. Small and mid-sized businesses now face sophisticated threats without the resources enterprises use to counter them, according to the companies.

San Francisco – – September 17, 2026 -- Abstract, a provider of composable security operations technology, has appointed Jonathan Eller as its first Chief Revenue Officer, tasking him with scaling global sales as enterprises abandon monolithic SIEM platforms.

Eller will oversee sales, channel, customer success and revenue operations, reporting to CEO Colby DeRodeff.

He joins from Concentric AI, where he led global sales, and brings more than two decades of enterprise security sales experience from CrowdStrike, Proofpoint and AccessData.

Abstract raised $25 million in July, tripling its valuation and pushing total funding to nearly $50 million.

The company reported 380% annual recurring revenue growth, 264% net revenue retention, and a tripled customer base alongside that funding round.

New York – September 16, 2026 -- FAZE Security has exited stealth mode with 50 enterprise customers, including several Fortune 500 firms, after posting roughly 20X annual recurring revenue growth in 18 months. The company, formerly known as CYTRIX, also disclosed $6 million in seed funding led by New Era Capital Partners, with participation from Lockstep VC.

FAZE targets the widening gap between vulnerability discovery and remediation capacity

Annual pentests become outdated the moment reports are delivered, while automated scanners flood security teams with thousands of unranked findings. Attackers now use AI to exploit these gaps within hours, creating a remediation backlog that outpaces human security teams.

Cupertino, Calif. – September 16, 2026 -- Cyble has appointed Steve Ingram as Executive Vice President, US, moving him from a two-year advisory role into an operating position as the AI-native cybersecurity company accelerates growth in the American market.

Ingram exits advisory board to run Cyble's US business operations

Ingram will lead Cyble's US business, taking responsibility for customer and partner relationships and expanding the company's footprint in what Cyble describes as one of the world's largest cybersecurity markets. He joins after two years on Cyble's Advisory Board, during which he counseled the company on portfolio expansion and global growth.

Houston – September 16, 2026 -- Nutex Health Inc. (NASDAQ: NUTX) disclosed that the unauthorized third party behind its previously reported cybersecurity breach has now published on its own website the data allegedly stolen from the healthcare operator's network.

Nutex confirms attacker posted stolen data online

The Houston-based company, which operates 28 hospital facilities across 12 states, said it first flagged unauthorized network activity in an August 24, 2026 Form 8-K filed with the Securities and Exchange Commission, updated on August 31, 2026. Nutex has engaged an independent cybersecurity response team and forensic experts, activated containment measures and notified law enforcement.

Arlington, Va. – September 15, 2026 -- Claroty Public Sector LLC's xDome for Government platform has achieved compliance with the FBI's Criminal Justice Information Services (CJIS) Security Policy, the company announced in partnership with cybersecurity advisory firm Fortreum.

Compliance targets protection of criminal justice data confidentiality and integrity

The CJIS certification confirms Claroty's cyber-physical systems (CPS) platform meets the FBI's security requirements for handling sensitive criminal justice information. Law enforcement and public safety agencies face mounting pressure to secure a growing base of connected and legacy infrastructure, including weapons platforms, building management systems, operational technology, and IoT devices, while limiting third-party and vendor risk.

Cologne – – September 15, 2026 -- Manufacturers of connected devices, industrial controls, routers and software products face their first binding reporting deadline under the EU Cyber Resilience Act (CRA) on September 11, 2026, when mandatory notification of actively exploited vulnerabilities and severe security incidents begins via a centralized EU reporting platform.

Manufacturers must report exploited flaws within 24 hours

Under the CRA, manufacturers must submit an early warning within 24 hours of learning that a vulnerability in their own product is being actively exploited, followed by a supplementary report within 72 hours. A final report is due no later than 14 days after a remediation or risk-mitigation measure is implemented.

Severe security incidents affecting product security carry the same 24-hour and 72-hour notification windows, with a final report required within one month of the incident report.

Omaha – September 15, 2026 -- SecureSky has acquired Soveren, a London-based Data Security Posture Management (DSPM) provider, adding real-time sensitive-data discovery and classification to its Continuous Threat Exposure Management (CTEM) platform.

Soveren claims 98% accuracy detecting sensitive data in encrypted traffic

Soveren's architecture pairs eBPF-powered network analysis with ML-driven classification, enabling it to inspect and classify encrypted TLS traffic at scale without impacting application speed. The company positions this against legacy DSPM tools that rely on regex detection and static snapshots, which it says produce high false-positive rates.

Miami – September 15, 2026 -- Qtonic Quantum has appointed Gina Fratarcangeli, a former Google Managing Director who oversaw an $8 billion Global Strategic Integrator ecosystem, as Senior Advisor for AI Transformation and Global Alliances. The move brings three decades of enterprise leadership from Google, Accenture, IBM and Genpact to a quantum cyber risk company scaling its post-quantum readiness business.

Fratarcangeli drove 89% year-over-year growth leading Google's North America systems integrator business

At Google, Fratarcangeli managed profit-and-loss portfolios of up to $5 billion and guided enterprise modernization programs for Fortune 1000 companies. Her joint AI go-to-market strategies with global systems integrators delivered 89% year-over-year growth, according to the company.