Security tools, compliance frameworks, and threat intelligence
Microsoft will stop auto-enabling Foundational CSPM for new Azure subscriptions on October 27, 2026. Qualys launched Real-Time CSPM to shift from periodic scans to continuous monitoring.
Three analyst firms peg the zero trust security market at $48-54B in 2026, up from ~$41B in 2025, giving CISOs hard numbers for multi-year budget justifications. Menlo Security and IGEL partner to deliver endpoint-to-browser isolation for VDI environments, creating an alternative to full SASE platform replacement.
Cl0p ransomware group exploited CVE-2026-12569 in PTC's PLM software to extort over 40 organizations. Meanwhile, H1 2026 breach victims already exceed all of 2025 by 58%.
Sophos data shows identity-based attacks overtook vulnerabilities as the primary ransomware entry point. Recovery costs average $1.7 million per incident.
Palo Alto Networks completed its $25 billion CyberArk acquisition in February 2026, bundling premium identity security into a platform play. Standalone PAM and identity vendors now face pressure to justify procurement against consolidated suites.
Qualys' new event-driven posture monitoring is included free for TotalCloud subscribers, forcing CSPM vendors to justify separate pricing for continuous monitoring.
Trout Software and Carahsoft released Access Gate v26.6 on August 25, 2026, targeting U.S. water and wastewater OT systems. The overlay enclave architecture blocks lateral movement from compromised workstations to PLCs and SCADA by default.
FBI warns of critical infrastructure targeting while new survey data shows ransomware incidents now cost enterprises 348 million yen and require over a month to recover.
Microsoft claims its autonomous containment feature halts ransomware chains in 128 seconds from alert to isolation. The metric sets a new benchmark for EDR response times as SonicWall and Palo Alto VPN flaws drive active intrusions.
Three identity startups raise $905M combined to secure AI agent access to enterprise SaaS. Buyers should plan separate budgets for non-human identity controls.
DigitalOcean launched Managed Rules and per-resource suppression on August 12, giving SMBs enterprise-grade CSPM tuning without adding vendors.
New controls tie AI requests to verified user identity before reaching models. Federal zero trust distribution expands through Carahsoft partnership.