Short, checked, cited where we can. The announcements, the moves and the things worth a look.
Follow @cxtodaynewsMaersk is investigating unauthorized access and data extraction from a local legacy system inherited through an acquisition. The company says preliminary findings show no sensitive data disclosed and no evidence that other systems or connected customer and partner platforms were affected. Booking and shipment management continue as normal.
ServiceNow is adding agentic AI capabilities to its Integrated Risk Management platform to help businesses identify and address control failures across connected enterprise systems. For customer-facing organizations, this could help identify security gaps, access issues or system weaknesses before they disrupt services or expose customer data.
Cisco has launched new red teaming, agent observability and vulnerability management features. Its AI Defense platform will add Anthropic’s Claude Mythos to help security teams simulate attacks against AI agents before deployment, Splunk Agent Observability enhancements will link AI token spending to agent performance and Cisco IQ will correlate live threat intelligence with exposed network infrastructure.
Mythos 5.2 is designed to identify, reproduce, and help fix software vulnerabilities, with access restricted to its Cyber Verification Program. Fable 5.2 brings related advances in coding, reasoning and technical problem-solving, with safeguards intended to limit misuse. Protecting the systems underpinning customer-facing services is essential to safeguarding personal data, service continuity and customer trust.
A security researcher found a hardcoded password in U.S. hotel chain Wyndham’s Android app that exposed an internal Salesforce database with customer names, email addresses, membership numbers and login tokens. The database held millions of entries, though the number of affected records is unclear. Wyndham says it revoked the credential and found no evidence of unauthorized access.
CrowdStrike used Fal.Con Europe 2026 to unveil a set of AI security updates for the agentic enterprise, including an AI Kill Switch to terminate rogue or unauthorized agents, agent-level controls, AI traffic inspection and expanded protection across environments including Claude Cowork, AWS AgentCore, Dell AI Factory with NVIDIA, CoreWeave and Lovable. CrowdStrike also announced planned acquisitions of Fiddler and Dreadnode.
AI-powered malware is highly likely to be used in a ransomware attack against the U.K.’s critical national infrastructure by 2028, the National Cyber Security Centre (NCSC) has warned. CEO Dr Richard Horne said the era of “tech on the cheap” at the expense of security is over, warning that AI will increase the speed, scale and sophistication of cyberattacks.
CrowdStrike has linked a global cyber-espionage campaign to China-nexus threat actor VAPOR PANDA, which it says has targeted more than 200 organizations across at least 14 countries since October 17, including government, defence, finance, telecoms, semiconductor and pharmaceutical entities.
Freshworks is acquiring AI-powered incident investigation company Robusta Dev to help IT teams diagnose and resolve service disruptions faster, reducing their impact on customer experience. Robusta Dev's analytical capabilities will be integrated into Freshservice and connected with incident response platform FireHydrant, helping teams automate investigations and reduce resolution times.
Coinbase has confirmed that a "small subset" of customer contact data was affected by a security incident at data analytics vendor Amplitude, which also affected other Amplitude customers. The cryptocurrency exchange said there is no evidence of unauthorized access to Coinbase systems, and no impact on customer funds.
In Brief runs on tips. A good nugget is short and specific — a launch, a hire, a funding round, a number, a neat find worth a look — and it lands best with a source link so we can check it and cite it. We read everything and curate what runs; nothing publishes automatically.
File it at the news desk →@cxtodaynews on X ↗Primary source · date · number · named spokesperson. Two of the four and we will usually run it.
