
Several cybersecurity companies have released new products and updates. Netscout has enhanced its DDoS protection to mitigate outbound attacks, helping service providers prevent compromised devices from disrupting networks. F5 has improved its AI Gateway to better control AI costs, access, and security through policy enforcement. Intezer has introduced a native automation builder for security workflows, eliminating the need for separate SOAR tools. Tufin has updated its orchestration suite with AI-driven segmentation analysis and multi-vendor automation capabilities.

Jake Williams has introduced a new framework called CUSTODY designed to limit the actions of AI agents within an enterprise network. This release follows recent security incidents involving OpenAI and Hugging Face, highlighting concerns about the potential risks posed by autonomous AI systems.

The U.S. CISA has added a critical command injection vulnerability in Progress Kemp LoadMaster to its Known Exploited Vulnerabilities catalog. Tracked as CVE-2026-8037, the flaw allows unauthenticated attackers to execute arbitrary code on affected devices. This addition follows reports of active exploitation attempts, with over 792 observed in the past 41 days.

A Chinese threat actor, UAT-7810, is reportedly enhancing its custom malware to broaden its Operational Relay Box (ORB) network. This expansion involves compromising internet-facing networking devices, according to Cisco Talos.