News is starting to pick up as the Autumn conference season begins. At the same time, hackers are taking advantage of workers returning to the office to launch a new wave of phishing and other attacks. The largest attack reported last week was against Jaguar LandRover (JLR). It led to the company stopping production lines, impacted retail operations and led to staff being told to stay at home. Scattered LAPSUS$ Hunters have claimed responsibility.
In other news, Sola Security raised $35 million in a Series A funding round. The company only emerged from stealth mode six months ago, where it raised $30 million. It has already seen 2,000 customers take on its Freemium platform. It also claims that customers have built over 1,000 security applications using its GenAI platform.
WisdomAI has launched a range of proactive AI Agents, calling them “The always-on AI data analyst that augments your team”. They will sit on its Agentic Data Insight platform. The goal is to remove the mundane collection and analysis of data away from humans, allowing them to focus on strategy and judgment. It sees this as augmenting, not replacing, humans, leaving them free for things that deliver greater value to the business.
Precisely is adding yet more AI capability to its Data Integrity Suite. It is expanding the Data Integrity Suite with a context-aware Copilot and AI Agents. These will automate many of the tasks involved in data integrity, allowing customers to meet compliance and data quality standards.
WSO2 has appointed Kristian Györkös as Senior Vice President & Global Head of Channel. With over 20 years of experience in managing alliances and channel partners, his appointment makes sense. Since its acquisition by EQT Partners, WSO2 has focused on new products and developers.
Notion is ramping up its European operations. It is adding new offices in London, Paris and Munich to support local hubs. Furthermore it has appointed Mick Hodgins as GM for EMEA to drive growth. Customers will also get data residency through a new AWS-hosted region in Germany.
eSentire
eSentire has released a new blog looking at Nightshade C2, a new botnet that was first seen in August 2025. It is being deployed via a loader that employs a simple yet highly effective technique to bypass malware analysis sandboxes and exclude the final payload in Windows Defender. Researchers have dubbed this technique “UAC Prompt Bombing”.
FBI
The FBI and the American Bankers Association have released an infographic designed to educate people about the growing threat of deepfake scams. The infographic lists several key signs that the user is dealing with a deepfake. These include blurry features, audio-video mismatches and strange lighting.
ManageEngine
ManageEngine announced the availability of DDI Central 5.5 through a blog rather than a press release. There are seven new features listed and explained in the blog that will interest users. By only announcing it in a blog, many users may have missed the announcement.
National Cyber Security Centre
In addition to a note saying it was supporting JLR, the NCSC also dropped a blog this week on how to adapt vulnerability disclosure for AI safeguards. Many organisations have little to no safeguards around AI deployment, and there is a disconnect between the two areas of technology. This blog provides some useful guidance on how to start addressing that.
noyb
Two important pieces of news from noyb. A challenge against the EU-US Data Transfers, known as the Latombe case, was ruled on last week. The complaint was rejected, but noyb believes that the court ruling relied on outdated evidence and has massively departed from previous CJEU rulings. It is not known if an appeal will take place or if there will be a change to the scope of the case.
The CNIL, the French DPA, ruled against Google over its sending unsolicited advertising emails directly to the inboxes of Gmail users. No consent was gained from users, so it fined Google €325 million.
US Department of Justice
In a bad week for Google, the US Department of Justice Antitrust Division also won significant remedies against the tech giant over its online search business.
In United States et al. v. Google, the US District Court for the District of Columbia prohibited Google from entering or maintaining exclusive contracts relating to the distribution of Google Search, Chrome, Google Assistant, and the Gemini app; ordered Google to make certain search index and user-interaction data available to rivals and potential rivals; and ordered Google to offer search and search text ads syndication services to enable rivals and potential rivals to compete.
