Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

This briefing covers two distinct horizons. The past week (23–30 September 2026) is a cluster of material, actively exploited edge and enterprise-application flaws, plus confirmed identity and third-party incidents. The past month (31 August–30 September 2026) shows those events as part of a faster pattern: perimeter appliances as the preferred initial-access class, build systems as ransomware feedstock, non-human identity as a wipe and extortion primitive, and overlapping EU and U.S.

Application security testing (AST) is the practice of scanning software for vulnerabilities using static, dynamic, and component-level analysis – then managing those flaws through remediation, validation, and certification. A new independent report from FOURCASTERS and Lionfish Tech Advisors confirms that AST is not becoming obsolete. AI and cloud platforms are changing how testing gets delivered, but the need for independent testing, flaw lifecycle management, and validation has only grown.

You already pay for Microsoft 365. Before adding AI security, check which tools, accounts and activities your existing controls protect. Then decide what your IT team or managed service provider will manage. Microsoft AI security includes Purview controls for supported third-party AI discovery, sensitive-data protection and prompt-injection detection. Purview may meet your requirements when its licensed and configured controls cover your workflows.

Cloud adoption is no longer just a question of where workloads run. Managing a complex cloud environment without a unified view is like running a city with separate control rooms for every utility. While this is quite possible, it likely will be much slower and much harder to manage. In a similar way, the bigger challenge for IT Leaders is maintaining visibility, security, operational control, and evidence for compliance.

A Technical blog series on where sensitive data moves in an AI workflow, what decisions Protecto makes at each point, and what enterprises get from enforcing policy once instead of everywhere.

Our September release brings improvements across Egnyte. We’ve made AI more relevant—it now remembers a user's preferences and past interactions. We’ve also added tools for organizing files and folders directly from conversations. Admins will now have control and clear visibility into MCP activity. They can see reports about tools and sessions. The release also expands Salesforce integration to Egnyte domains.

Today’s businesses spend more money on SaaS tools than on laptops. According to Gartner, the average organization now uses over 125 different SaaS applications. With the multitude of cloud apps businesses use on a daily basis, securing that expanding environment requires visibility and control across users, applications, data, and infrastructure.

Answer this without checking: how many AI agents are running in your environment right now? Most security leaders give an estimate and a shrug. That is a fair response, because agents get spun up by an engineer solving a problem on a Tuesday afternoon, through a path that puts them on nobody's radar. In August 2026, researchers found AI agents connected to Hugging Face running loose inside enterprise networks with no owner and no audit trail.

DevOps moves fast by design. Continuous integration, automated deployments, and infrastructure-as-code let development teams ship features in hours rather than weeks. Security teams have a real opportunity here: when they build workflows that integrate directly into the development process, they gain coverage and response speed that manual, disconnected approaches leave on the table.