This Week's Top Five Stories in Cyber

Securing AI: Behind Palo Alto Networks' Portkey Acquisition

Standing at the dawn of the autonomous agentic enterprise era, the insider threat risk now has highly-privileged machine form. 

To mitigate the threat, cybersecurity leader Palo Alto Networks has revealed plans to acquire AI gateway specialist Portkey. 

The deal is reflective of the growing urgency among organisations as they scramble to keep autonomous AI agent risks at bay, amid rapid deployment in day to day operations.

“AI agents have become privileged insiders, reasoning and executing on behalf of users and companies,” notes Nikesh Arora, Chairman and CEO at Palo Alto Networks. 

World Password Day: Have Passwords Become Obsolete?

In a world mired by cyber incidents, another World Password Day has come by as a reminder to secure our digital lives.

First launched by Intel Security in 2013, World Password Day aims to encourage stronger password habits and raise awareness around online security. 

Held annually on the first Thursday of May, the event has evolved from a static reminder to update weak passwords into a wider conversation on the future of authentication – particularly relevant today as governments, businesses and technology providers increasingly push towards passwordless security. 

"World Password Day is in desperate need of a rebrand," argues Ev Kontsevoy, CEO at Teleport. 

"Passwords are broken. The industry knows this. Every static credential – every password, API key, private key or any secret of any kind – is a persistent risk."

Trend AI: Agentic AI Adoption in Finance Overlooks Security

Agentic AI systems are creating new attack surfaces across the financial sector.

Autonomous decision-making tools now operate beyond human oversight in many organisations.

TrendAI – a business unit of Trend Micro specialising in AI cybersecurity – has published research exposing the security gaps that emerge when deployment outpaces governance.

The findings could mean that institutions are creating vulnerabilities faster than they can defend them. The research finds that 31% of financial services firms lack observability or auditability over AI agents.

Vodafone & Google Cloud: Securing SMEs from Cyber Threats

Vodafone Business and Google Cloud have combined their capabilities to deliver cybersecurity and agentic AI tools to small and medium sized enterprises.

The collaboration forms part of a US$1bn strategic agreement signed by the two companies in 2024 for a ten-year period.

Vodafone serves 360 million customers across 15 countries and Google Cloud provides an AI stack and Gemini models to help organisations in 200 territories prepare for the agentic era.

Fanan Henriques, Product and International Business Director at Vodafone Business, says: "Vodafone Business is helping millions of SMEs unlock the power of AI without the complexity or risk."

OpenAI's Effort to Secure ChatGPT with Yubico

As AI tools become our constant companions, they have access to a mountain of personal and work-related data.   

Addressing this security concern, Yubico has announced a landmark collaboration with OpenAI that brings hardware-backed security keys directly to ChatGPT users for the first time. 

With this partnership, users can purchase a new two-pack set of customised YubiKeys under OpenAI’s Advanced Account Security programme. 

"We are introducing a new model for phishing-resistant security at scale for the AI ecosystem," says Jerrod Chong, CEO at Yubico.

"This partnership with OpenAI delivers the highest level of protection against phishing with a low-friction user experience."