Data Security & Cyber Resilience

Revyz, a Spin.ai company, announced Revyz Command Center for Bitbucket, extending its enterprise data protection platform from Jira and Confluence to source code and pipelines in Bitbucket Cloud, alongside the appointment of Justin Leader as Head of Partnerships, Atlassian Ecosystem. The launch, announced ahead of Atlassian Team '26 Europe in Amsterdam on October 6-8, adds granular recovery of specific repositories, branches, pipelines, or issues, run-to-run diff visibility, and AI code protection. Revyz, acquired by Spin.ai in April 2026, is a Platinum Atlassian Marketplace Partner whose platform is SOC 2 Type II compliant. Justin Leader founded HyperVelocity Consulting in 2014, growing it to $24M in revenue before its acquisition by Isos Technology in 2023, where he served as VP of Product, and brings 15 years of SaaS experience to overseeing global Atlassian ecosystem partner strategy. Revyz Command Center for Bitbucket is available today, with solution partners able to access the app and co-selling support through the updated Revyz Partner Program.

Thales announced CipherTrust Data Security Posture Management, which the company describes as the first purpose-built DSPM offering that lets organizations protect sensitive data directly through encryption, masking or tokenization natively within the platform. The unified as-a-service platform combines sensitive-data discovery and classification with posture, access, activity and behavioral context to prioritize material risks, and it provides discovery and risk visibility for both structured and unstructured data across cloud, on-premises and hybrid sources. Todd Moore, Vice President of Data Security Products at Thales, said organizations need to understand which sensitive data is truly at risk and take direct action to reduce it, adding that CipherTrust DSPM connects risks to protections such as encryption and tokenization rather than relying on permissions alone. The approach builds on more than 30 years of Thales expertise in data discovery, protection, key management, access control and activity analysis. Hiroji Sugito, Principal Data Security Engineer at Tokyo Electron Device, said the platform's ease of deployment and the accuracy of its data classification enable customers to quickly understand where their sensitive data is, who or what can access it, and how to protect it without slowing AI adoption.

Everpure announced new platform capabilities extending its Data Primacy vision, including native MCP integration, AI-optimized FlashBlade acceleration, and privacy-first data intelligence tools aimed at simplifying and securing enterprise data management for AI workloads. The company said the upgrades bring high-performance AI execution directly to data at the source while classifying sensitivity and access in real time, positioning its platform as a central control layer for both AI cost management and cyber resilience. Everpure said the near-term catalysts remain execution on its FY2027-2028 revenue guidance and uptake of newer software-led offerings. Eight Simply Wall St Community valuations for Everpure span roughly US$84 to over US$370 per share. The company faces a rich sales multiple, recent insider selling, a volatile share price, and index reshuffling.

Nvidia CEO Jensen Huang closed out a blockbuster third quarter in which Nvidia's stock rose about 19% and the company announced the largest stock buyback in history at $150 billion, bringing its total buyback program to $235 billion. Huang also joined other tech executives at a White House AI safety gathering, where his signature drew attention on social media, and appeared at a state dinner with the president. On the company's August earnings call, Huang said growth could exceed 100% next year. Separately, Rubrik CEO Bipul Sinha told Yahoo Finance that AI carries 1000 times more opportunities and 1000 times more risk, and warned that much of the Fortune 500 still runs on legacy technology as AI-powered attacks expand the threat surface. Micron and SanDisk were also in focus on Micron's earnings day, with both trading at single-digit forward earnings multiples despite triple-digit revenue growth.

NetApp announced new capabilities that let enterprises activate data in place with zero-copy access to accelerate agentic AI adoption. The heterogeneous metadata capability of NetApp AI Data Engine now extends metadata discovery across the full enterprise data estate, including NetApp ONTAP, StorageGRID, and non-NetApp storage, spanning NFS, SMB, and S3 repositories. NetApp is also previewing upcoming AIDE innovations, including expanded AI-powered data understanding, deeper governance intelligence, open analytics integrations with engines such as Starburst and Onehouse.AI, and new agentic services. An expanded integration with Commvault connects the NetApp Platform to Commvault recovery orchestration, delivering near-real-time threat detection, cleanroom validation, and advanced clean recovery from the Commvault console, enabling joint customers to recover in minutes rather than days or weeks. Asad Khan, Senior Vice President and General Manager of AI at NetApp, said the agentic enterprise will be defined by how quickly and safely organizations turn data into intelligence, while Commvault Chief Technology and AI Officer Pranay Ahlawat said the integration helps customers reduce mean time to clean recover.

Rank One Computing Corp shares rose 7% in Monday trading after the company secured an eight-year, $64.3 million contract with the U.S. Department of Justice. The award supports the Justice Department's Digital Evidence Review Platform program, with ROC managing the ingestion, review, analysis, and processing of e-discovery assets such as mobile device extractions and social media data for federal prosecutions. The contract comprises an initial one-year base period valued at approximately $7 million, followed by seven single-year option periods exercisable at the government's discretion. The win follows a federal Automated Biometric Identification System contract award and validates ROC's recent strategic acquisition of digital forensics firm ZTC. Management said federal law enforcement agencies are increasingly prioritizing domestic, sovereign AI solutions to modernize siloed analytical workflows and manage expanding digital evidence volumes.

Bedrock Data announced it has extended Agent DLP, its runtime data loss prevention for AI agents, to NVIDIA OpenShell, the open source agent runtime that is part of the NVIDIA Open Safety Platform. The integration adds a policy evaluation layer in which Bedrock Data evaluates a request payload once OpenShell authorizes the request, checking it against an enterprise's data policies and returning the decision OpenShell enforces at runtime. Bedrock Data supplies the data context and the decision through OpenShell's Supervisor Middleware, drawing on its Metadata Lake enterprise knowledge graph, which classifies data in place across cloud, SaaS, AI and on-premises environments at petabyte scale. The company said the integration lets restrictions travel with data across tables, tools and handoffs between agents, so actions that permissions allow can still be stopped when the data involved may not go where it is headed. Bedrock Data Agent DLP for NVIDIA OpenShell is available today to Bedrock Data customers as an OpenShell supervisor middleware service, and teams can run it first in observe-only mode before turning on enforcement.

TrendAI, the AI security business unit of Trend Micro Incorporated, announced support for the NVIDIA Agent Safety Platform, NVIDIA's full-stack infrastructure for running autonomous AI agents safely at enterprise scale. TrendAI Vision One extends NVIDIA's agent safeguards across the whole AI factory, covering agents, models, containers, storage and networks on one platform, pairing hardware-level detection on NVIDIA BlueField DPUs and network security with Zero Day Initiative threat intelligence. The platform's model protection uses inline inspection of prompts and responses to block prompt injection and jailbreaks and to redact sensitive data before it leaks, while harness and tool governance lets security teams control which tools and MCP servers agents can reach and inspect every tool call. Data and identity controls find and classify sensitive data feeding AI, stop agents from reaching data they shouldn't, extend file security and data loss prevention to files agents read and write, and strip excess privilege from agents and other non-human identities. Using NVIDIA BlueField DPU and DOCA telemetry, TrendAI Vision One detection stays trustworthy even if the host OS is compromised and correlates AI signals with endpoint, network and identity telemetry so a hijacked agent cannot move laterally unseen. Rachel Jin, Chief Platform and Business Officer and Head of TrendAI, said security cannot sit in one place and must cover the model, the harness, and every tool and data source an agent touches.

VAST Data has announced the launch of VAST DataEnclave, a confidential AI capability that securely integrates leading AI models with sensitive enterprise data. Leveraging NVIDIA Confidential Computing, DataEnclave lets AI models from providers including Cohere, CrowdStrike, and Deepgram operate in secure environments, protecting both customer data and AI model intellectual property. The offering targets highly regulated industries such as financial services and healthcare, where sensitive data must interact with state-of-the-art AI models while remaining within trusted infrastructure. The initiative marks a significant step toward a more encrypted and secure AI ecosystem, with AI models managed alongside data to safeguard enterprise intellectual property.

Crypto exchange Coinbase revealed by September 22 that it is developing a crypto custody system capable of supporting any post-quantum signature scheme blockchains may adopt in the future, in preparation for the risk of quantum computers cracking encryption. Yehuda Lindell, the company's head of cryptography, explained this in a video interview with the Mara Foundation. The company is upgrading its current custody infrastructure, which uses multi-party computation, so that it can withstand attacks by quantum computers, and is also considering an alternative approach using specialized devices called hardware security modules in case a signature scheme is adopted that multi-party computation cannot handle. According to the Mara Foundation, the company protects roughly 250 billion dollars' worth of digital assets centered on this system. On July 23, Coinbase explained on its official blog that its current key management system, CoreKMS, protects about 99.9 percent of its custodied assets, and that it is also developing a quantum-resistant version, PQ-CoreKMS, with plans to build an automated infrastructure within one year that can securely sign while distributing keys across multiple locations. Over the following two to three years, it aims to develop multi-party computation that does not require generating a complete private key even for quantum-resistant signatures.

Fortinet shares climbed to a fresh 52-week high of $175.23 on Sept. 21, 2026, before closing at $172.78, up roughly 3% on the session, extending a rally built on accelerating demand for its unified security platform. The company rolled out FortiSOC, a cloud-delivered security operations center embedding agentic AI across SIEM, SOAR, threat intelligence and identity-detection functions, and extended FortiEndpoint with AI visibility, governance and data-loss-prevention capabilities, while deepening its FortiAIGate integration with NVIDIA's accelerated computing stack. In the second quarter of 2026, billings rose 33% year over year to $2.37 billion, revenues grew 26% to $2.05 billion, and product revenues surged 52% to $773 million, with non-GAAP operating margin hitting a second-quarter record of 38% and free cash flow more than tripling to $966 million. Management raised full-year 2026 guidance to $8.02-$8.18 billion for revenues, $9.35-$9.55 billion for billings, and $3.41-$3.47 for non-GAAP EPS, with third-quarter guidance calling for revenues of $2.01-$2.10 billion. Fortinet shares have gained 120.7% year to date, and the Zacks Consensus Estimate for 2026 earnings is $3.42 per share, implying year-over-year growth of 23.91%.

Cyera announced a $400 million extension from Growth Equity at Goldman Sachs Alternatives to its Series G round, which was led by Evolution Equity, to accelerate its mission of building a unified platform that governs access for every human, machine, and AI agent across the enterprise. The new investment will continue to support new capabilities across Cyera's AI Security product roadmap, fuel deeper expansion in the federal market, and drive continued international growth across EMEA and APAC. Cyera has secured the data layer since day one and this year extended that control to agents acting on it, with Agent Guardian and Cyera Endpoint giving enterprises visibility and accountability across AI agents, tracking tool calls, database queries, and actions from the cloud to endpoint devices where local agents such as Claude Code and Cursor increasingly perform sensitive work. The acquisition of Oasis Security brings that visibility together with non-human identity management in a single system, connecting where sensitive data lives with who or what can actually reach it. Cyera, valued at over $12 billion, is backed by investors including Accel, Blackstone, Cyberstarts, Georgian, Lightspeed, and Sequoia, and its customers include Paramount, Chipotle, and Valvoline.

Cohesity introduced Cohesity Agent Resilience, a new Cohesity Data Cloud capability that discovers, protects, and recovers the infrastructure behind enterprise AI agents, at its Cohesity Catalyst event. The capability is available now to select customers, with general availability targeted for the end of 2026, and launches with support for Amazon Bedrock AgentCore and Amazon Bedrock Agents, while Microsoft and Google agent platforms are on the roadmap. Cohesity also outlined its vision for Autonomous Cyber Resilience, which uses agentic workflows to automate its five-step cyber resilience framework covering protection of data, identity, applications, and agents, recoverability, threat remediation, application recovery practice, and risk posture optimization. The company additionally introduced the Cohesity AI Resilience Academy, beginning with a free, self-paced Foundations of AI Resilience with Cohesity course of 25 to 30 minutes that Catalyst attendees can access early, exclusive to them for approximately two weeks before entering the broader Cohesity Academy catalog. Cohesity cited fifth annual Cohesity Global Cyber Resilience Report findings that 56% of organizations said they were not well prepared to detect or contain unintended actions by AI agents and automated workflows, and 58% were not very confident in verifying the integrity of AI models and related data after a cyberattack.

Zscaler's Security for AI bookings rose more than 50% sequentially in the fourth quarter of fiscal 2026, with AI Protect bookings crossing $100 million over the trailing 12 months. About 70% of Security for AI deals in the quarter also included Data Security, and the company introduced Zero Trust Exchange for Agents and Endpoint AI Security, which are expected to scale in the second half of fiscal 2027. Zscaler reported fourth-quarter revenues of $898.2 million, up 25% year over year, while annual recurring revenues rose 25% to $3.77 billion, though fiscal 2027 revenue guidance implies growth of about 17%. Rivals are expanding too: Palo Alto Networks' Prisma AIRS reached about $120 million in ARR within roughly a year of general availability and exceeded 800 customers, while CrowdStrike's AIDR ending ARR nearly tripled from the first quarter. ZS shares have plunged 12.3% year to date, and the stock carries a Zacks Rank #3 (Hold).

The National Cyber Security Agency, or NCSA, has unveiled its direction for driving Thailand's cybersecurity, moving to clear out technology debt and elevate organisations toward Cyber Resilience in order to counter threats in the AI era, while setting a goal of bringing government agencies and critical information infrastructure, or CII, to quantum technology readiness, or Quantum-Ready, by 2030. Air Vice Marshal Amorn Chomchoey, Secretary-General of the NCSA, said at an open talk stage hosted by OPEN-TEC, a technology knowledge hub under TCC Technology Group, that over the past 20 years IT systems were adopted rapidly without enough emphasis on security, resulting in Technology Debt, or accumulated vulnerabilities in legacy systems. The NCSA therefore proposed guidelines for raising cybersecurity through key principles, stressing that security must begin on day one of AI development, covering software and data use, model training, and post-deployment operations, alongside building Cyber Resilience that shifts from a prevention-only mindset to the ability to withstand, detect, respond to, and recover critical infrastructure systems such as energy, public health, transport, and financial services, as well as the Zero Trust principle, the Least Privilege principle, and public-private partnership. In addition, the NCSA has begun laying out guidelines to survey Cryptographic Libraries, upgrade Web Servers to support the TLS 1.3 standard, and plan a transition to quantum-resistant encryption systems, with the goal of bringing the public sector and key agencies to Quantum-Ready status by 2030. It is also organising the Thailand Cyber Top Talent activity to address the shortage of cybersecurity personnel and to exchange threat intelligence for early warning.

Commvault Systems has enabled its managed service provider partners to deliver FedRAMP High Authorized Commvault Cloud for Government services to U.S. federal agencies and defense contractors, broadening the company's public sector reach. The move lands on a stock with a 7 day share price return of 10.29% and a 90 day share price gain of 11.67%, though its 1 year total shareholder return is down 23.35% while the 3 year total shareholder return is up 111.68%. The most followed valuation narrative puts fair value at $161.15 against a last close of $145.21, implying roughly 10% upside, and rests on analyst expectations of about 10.6% annual revenue growth, profit margins rising toward 9.8%, and an 8.85% discount rate. That story leans on recurring SaaS economics, including 63% SaaS ARR growth, a 45% increase in multi-product customers, and 125% SaaS net dollar retention. A contrasting read notes the stock trades at a P/E of 88.1x versus 30.5x for the wider US Software group and a fair ratio of 38.7x, signaling valuation risk if sentiment cools.

Varonis Systems, Inc. launched Varonis Data Lifecycle Management, a new capability that automatically identifies and remediates redundant, obsolete, and trivial data across enterprise environments using its existing Data Security Platform. The launch ties data cleanup directly to sensitivity, access, and activity context, aiming to reduce storage waste, improve AI output quality, and help organizations address compliance exposures from scattered sensitive information. The DLM tool stacks on top of Varonis Atlas, the AI security platform that went generally available in March 2026, which targets discovery, posture management, and runtime protection for AI workloads. Together, Atlas and DLM broaden Varonis' role from guarding unstructured data to governing how that data is stored, used, cleaned up, and exposed across Snowflake, Claude, Cursor, and other cloud and AI partnerships. Varonis Systems' narrative projects $1.1 billion revenue and $120.7 million earnings by 2029, yielding a $50.68 fair value, an 8% upside to its current price, while the most pessimistic analysts were already modeling about US$1.0 billion of 2029 revenue.

Palantir and Nvidia have reportedly tightened restrictions around Anthropic's advanced AI models over data-retention concerns, with Palantir demanding irrevocable zero-data-retention guarantees before making the models available through its software and Nvidia limiting Claude to less-sensitive internal work. Palantir's September 10 sovereign-AI push with Nvidia uses Nvidia Nemotron open models and customer-controlled infrastructure, while Anthropic said on September 1 it would roll out Enterprise Frontier Safeguards later this fall, storing data in customer-controlled cloud infrastructure with zero-data-retention protections. Microsoft's Sovereign Private Cloud can run large AI models in fully disconnected, customer-controlled environments, a proposition it expanded with Mistral on July 21, though Microsoft also offers Anthropic models across Copilot and Foundry and says Anthropic models used in its online services are excluded from some in-country processing commitments and unavailable in certain sovereign-cloud environments. Palantir's second-quarter U.S. commercial revenue rose 149%, and Insider Monkey tracked 86 hedge funds long PLTR in the second quarter of 2026, down from 96 in the first quarter, while 273 hedge funds held reportable MSFT longs in the second quarter, down from 282. Short positioning is more pointed in Palantir, with 65.13 million shares sold short as of August 31, 3.00% of float, and 2.2 days to cover.

The Ministry of Finance has joined hands with the Ministry of Digital Economy and Society to prepare four national central systems to link data on suspicious transactions between agencies, so that all sectors see the same set of risk data, and to speed up the tracing and freezing of money trails before funds are withdrawn, converted into digital assets or gold, or transferred out of the country. Dr. Ekniti Nitithanprapas, Deputy Prime Minister and Minister of Finance, in his capacity as chairman of the subcommittee on linking financial data to enhance the monitoring and investigation of suspicious financial transactions, disclosed together with Mr. Chaichanok Chidchob, Minister of Digital Economy and Society, that the subcommittee approved guidelines to upgrade the prevention and suppression of suspicious transactions in two areas: raising KYC, CDD and EDD standards to be on par with the world's leading financial centres, and drawing up a National Anti-Fraud Master Plan, whose core structure comprises four national central systems. These are the Data Sharing with Consent system, which exchanges risk data under consent; the Anonymous Financial Data Bureau, a centre for anonymous financial transaction data; the Case Management system, a national incident-reporting management system based on the principle of report once, one route; and the Financial Investigation and Account Action system for linking data and freezing money trails. The subcommittee has assigned the Permanent Secretary of the Ministry of Finance, together with relevant agencies, to design the details of the data structure, operating systems, connection guidelines, responsible parties, as well as the rules and data standards for all four systems, to be completed within 30 days before being submitted to the subcommittee for further consideration.

Palantir Technologies, Nvidia and Booz Allen Hamilton could restrict or stop using models from Anthropic and OpenAI unless the companies provide stronger guarantees around customer data and intellectual property, Reuters reported, citing The Information. Palantir has pushed Anthropic for irrevocable zero-data-retention guarantees before making its models available through Palantir software. Nvidia is taking a different approach, reportedly limiting Anthropic models to less sensitive work and using its own Nemotron models for some internal tasks. Booz Allen has also barred employees from using Anthropic's commercial model for proprietary cybersecurity work, as AI labs face more scrutiny over how usage logs and customer information are stored. Microsoft may have an opening, reportedly pitching isolated cloud environments and its own AI products to customers worried about data exposure.

Chen Yixin, China's Minister of State Security, warned that the rapid advance of artificial intelligence could threaten China's political stability and critical infrastructure. In an article published on Sunday, September 13, in the magazine China Cyberspace, he said that misuse of AI by hostile forces could directly threaten China's political security, institutional security and ideological security. He also warned that AI is growing more capable of finding system vulnerabilities and of creating malware or software to exploit them. The Chinese government is also concerned that hostile forces could use AI for public opinion and perception warfare, through AI-generated text and images, social media bots and deepfakes, to create political rumours, spread harmful information and stir up social division. At the same time, AI-powered web crawlers, data mining systems and profiling systems could boost the ability of foreign intelligence services to gather sensitive data, including government information, trade secrets and personal data. Countries with an AI advantage could invoke national security grounds to impose technology controls, monopolise industry standards and build closed ecosystems. The warning comes as executives at leading US technology companies call for more cautious AI development. Dario Amodei, co-founder of Anthropic, said in a blog post on Saturday, September 12, that AI capabilities are advancing faster than risk safeguards, and proposed that companies in the United States and other democracies coordinate their efforts. Chen's article, however, did not mention calls by Anthropic or OpenAI to slow the development of cutting-edge AI models, and there is no sign that the two sides' public statements were coordinated. Chen framed AI risks in terms of political control, technological sovereignty, foreign threats and strategic competition.

Japan's National Police Agency (NPA) said on September 10 that a total of 123 ransomware attacks were reported in Japan in the first half of this year, the highest half-year figure since record-keeping began in 2020. Of these, 79 targeted small and medium-sized enterprises (SMEs), 31 hit large companies, and 13 targeted other types of organizations. The NPA said more than half of all cases took over a month to recover systems, and 9 cases brought all business operations to a halt. Meanwhile, the number of detected suspicious accesses, often preparations for cyberattacks, rose by more than 4,000 per day per IP address compared with the same period a year earlier, reflecting the growing severity of cyber threats. The NPA has compiled half-year ransomware statistics since the second half of 2020. Ransomware is malware in which attackers demand a ransom in exchange for restoring access to a company's data, which has been encrypted and rendered unusable.

Commvault has introduced Active Directory Pre Recover, a solution that reduces the time to cleanly recover Active Directory from hours to minutes by creating a clean standby copy in an isolated Cleanroom environment. The solution, part of Commvault's Identity Resilience portfolio, uses existing technologies including Cleanroom and Threat Scan to ensure the standby copy is free of malicious content. Organizations can fail over to this clean copy during a cyber incident, maintaining access to critical systems without waiting for a full forest recovery. Commvault's Chief Products Officer, Rajiv Kottomtharayil, highlighted that identity is foundational to enterprise operations, and this innovation extends recovery progress toward near-real-time availability. Active Directory Pre Recover will be available for early access in the coming months, included at no extra cost for all enterprise AD customers, with a lite version of Cleanroom, and will be offered globally through Commvault's partner ecosystem.

LTM, the Business Creativity partner to the world's largest enterprises, announced a collaboration with IBM and Red Hat on Lightwell, an AI-driven solution to help enterprises safeguard the open-source software supply chain through vulnerability remediation. Lightwell delivers validated fixes for production environments, moving beyond detection to scalable remediation. LTM, an IBM Platinum Partner, will offer services including remediation strategy, dependency analysis, risk-based prioritization, program management, DevSecOps integration, testing, and deployment support. The collaboration aims to help organizations address security challenges across complex open-source ecosystems, with LTM's expertise in application modernization, cloud, cybersecurity, and DevSecOps. Executives from LTM, IBM, and Red Hat emphasized the need for collective defense and expert ecosystems to accelerate patch delivery and prevent zero-day exploits.