Cyber 2026

• Global cyberattacks increased by 17% in June 2026, according to new threat intelligence released by Check Point Software Technologies. • The surge was driven by a sharp rise in attack volumes, specifically targeting organizations through ransomware incidents and AI-driven security risks. • This trend highlights the growing danger of artificial intelligence being weaponized to enhance the scale and sophistication of cyber threats.

• The Sysdig Threat Research Team identified a May 10 incident marking the first known real-world cyber intrusion where a Large Language Model (LLM) agent operated with goal-oriented independence. • Without human guidance or pre-built scripts, the AI agent autonomously navigated four system pivots, harvested credentials, and exfiltrated an entire database in under one hour. • This event signals a critical shift in offensive cyber operations, demonstrating that AI can now execute complex, multi-stage attacks autonomously.

• China is narrowing the AI cybersecurity gap with the development of GLM-5.2 and 360 Security tools, positioning itself to match Anthropic's capabilities by 2026. • These advancements highlight a global race in artificial intelligence, where Chinese tools are becoming increasingly competitive in detecting and mitigating cyber threats. • The shift raises significant security and geopolitical questions for other nations, specifically regarding the impact on South Africa's digital infrastructure.

• Infoblox researchers discovered more than 236,000 scam domains leveraging the DCloud Uni-App framework to scale global phishing and fraud operations. • The breach highlights a critical vulnerability where legitimate software development tools are exploited by bad actors to bypass security and deceive users. • To combat these evolving AI-driven threats, experts recommend using GRC tools to automate compliance and maintaining updated regulatory inventories.

• A 2026 cybersecurity assessment of 1,200 IT and security professionals reveals a significant gap between organizational awareness and actual resilience. • AI-related threats are the top three concerns, with self-mutating malware (55.9%), public LLM data leakage (53.5%), and AI-driven evasion techniques (52.5%) all ranked as high or extreme risks. • The report highlights critical vulnerabilities including "Shadow AI" gaps, Living-off-the-Land (LOTL) risks, and increasing pressure regarding breach disclosure.

• Critical infrastructure remains vulnerable to disruptions five years after the Colonial Pipeline incident due to persistent security gaps between IT and OT networks. • OpenAI launched the "Patch the Planet" initiative this week, partnering with HackerOne and Trail of Bits to secure open-source software. • The initiative utilizes AI-driven analysis to help open-source maintainers identify and resolve critical vulnerabilities more efficiently.

• The "Five Eyes" intelligence alliance has warned that frontier AI models could significantly reshape the landscape of cyberattacks within months. • These advanced AI capabilities are expected to pose urgent security risks to governments, businesses, and nations like South Africa by 2026. • The shift matters because AI can automate and scale sophisticated cyber threats, potentially bypassing traditional security defenses more efficiently.

• The 2026 NASCIO-Deloitte Cybersecurity Study, surveying all 50 U.S. states, D.C., and the U.S. Virgin Islands, reveals that state CISOs are struggling to secure public data against increasingly sophisticated AI-driven threats. • Security leaders are facing a critical gap where evolving cyber risks are outstripping available budget allocations, necessitating a shift in how security value is measured. • To justify funding, officials are prioritizing operational KPIs—such as incident response time and phishing rates—and translating behavioral improvements into financial terms using breach cost data.

• Cybersecurity has shifted from a technical back-office function to a critical boardroom and public safety priority in 2026. • Financial institutions and regulated enterprises are now required to implement defensible controls for exchanging sensitive data with third-party partners, including law firms and auditors. • This shift is driven by the Digital Operational Resilience Act (DORA), which is transforming vendor communication from a matter of convenience into a strict regulatory requirement.

• The June 2026 cybersecurity newsletter analyzes the increasing role of artificial intelligence in modern cyber threats and its use by threat actors. • The report highlights how AI-powered tools are being leveraged to exploit system vulnerabilities more efficiently. • This trend matters as it signals a shift toward more sophisticated, automated attacks that challenge traditional defense mechanisms.

• Living Security has launched its 2026 Cybersecurity Awareness Month program, providing organizations with a turnkey solution for October security campaigns. • The program offers expert-led learning, interactive experiences, and ready-to-use resources to help companies avoid months of manual content development. • This initiative is specifically designed for highly regulated sectors, such as healthcare and financial services, to reinforce positive security behaviors and navigate trust in an AI-driven environment.

• CrowdStrike's 2026 Technology Threat Report identifies the global technology industry as the most targeted sector for cyberattacks, driven primarily by eCrime and state-sponsored actors from China and North Korea. • A critical vulnerability was highlighted involving a software package downloaded approximately 100 million times per week, posing a risk for one of the largest supply chain incidents recorded. • Threat actors are increasingly shifting their focus toward software development environments to compromise the integrity of the digital supply chain.

• Twenty-six cybersecurity merger and acquisition (M&A) deals were announced during May 2026. • Major industry players involved in these transactions include Cisco, Zscaler, Akamai, Check Point, Cyera, Dragos, and WatchGuard. • This surge in activity highlights a period of intense consolidation as leading security firms seek to expand their capabilities and market share.

• Infosecurity Europe 2026 highlighted how AI is "turbo-charging" cybercrime, enabling criminals and hostile states to launch faster and more collaborative attacks. • Experts noted a shift in attacker behavior throughout 2025, moving from simple chatbot usage to integrating Large Language Models (LLMs) directly into attack chains to manage dynamic tasks. • The trend underscores a critical need for the industry to transition from a reactive posture of responding to individual incidents to a more proactive defense strategy.

• AI-powered cyber threats are projected to become significantly more autonomous and sophisticated by 2026. • These advanced attacks are outstripping traditional security frameworks, allowing threat actors to bypass conventional defenses with greater ease. • This shift matters because AI fundamentally reshapes the cybersecurity landscape, increasing the danger and scale of digital incursions.

• Policy makers are currently working to establish a coordinated AI-security regime focused on frontier models, critical infrastructure, and voluntary government reviews. • Simultaneously, cyber attackers are evolving their tactics by refining malware distribution and abusing familiar platforms to target ordinary users at scale. • This tension highlights a growing gap between high-level government security frameworks and the rapid proliferation of low-friction criminal tooling.

• Fasken’s Privacy and Cybersecurity Group released its May 2026 monthly bulletin highlighting key legal updates across Canada, the US, and the EU. • The report emphasizes the EU's strategic focus on scientific research and the role of personal data processing in driving breakthroughs in artificial intelligence. • This intersection of innovation and data usage is critical as it balances the pursuit of global competitiveness with the protection of fundamental privacy rights.

• Washington-based Sublime Security said on May 15, 2026, that it was named to Rising in Cyber 2026, Notable Capital's annual list of the 30 most promising private cybersecurity startups. • The company said the cohort has collectively raised more than $6.9 billion, according to PitchBook, highlighting the scale of investor interest in security startups. • The recognition matters because email security remains a major attack vector for enterprises, and inclusion on the list can boost visibility with customers and investors.

• Cybersecurity challenges in 2026 have fundamentally shifted from isolated breaches to a continuous arms race where organizations must keep pace with threats that are faster and more sophisticated than ever. • Recent developments include Microsoft Teams Canvas innovations, CISA guidance updates, Anthropic's Mythos AI project for cyber vulnerability testing, and emerging security partnerships addressing enterprise needs. • Organizations face mounting pressure to adopt advanced threat detection, AI-powered defense mechanisms, and rapid response capabilities to counter AI-enabled cyberattacks and novel vulnerability exploitation methods.

• Abstract has been selected for Notable Capital's Rising in Cyber 2026 report, recognizing it among top emerging cybersecurity firms. • The report is based on CISO survey data and market analysis, highlighting industry shifts from AI agents transforming security operations. • Inclusion signals Abstract's innovative approach in a competitive landscape, drawing attention from enterprise buyers and investors.

• ProjectDiscovery, a leader in vulnerability detection and autonomous security testing, was named to the Rising in Cyber 2026 list by Notable Capital on May 12, 2026. • The company joins 30 startups that have raised over $6.9 billion collectively per PitchBook data, focusing on defining next-generation cybersecurity solutions. • Inclusion underscores ProjectDiscovery's role in advancing automated threat detection amid rapid sector expansion to $250 billion by 2029.

• Notable Capital unveiled Rising in Cyber 2026, its third annual list spotlighting 30 promising private cybersecurity startups, announced on May 12, 2026, from San Francisco. • The selected cohort has collectively raised over $6.9 billion according to PitchBook, amid a cybersecurity market projected to grow from $151 billion in 2025 to $250 billion by 2029 per Morgan Stanley. • This initiative highlights double-digit market growth and innovation in the sector, positioning these startups as leaders in next-generation defenses.

• Anecdotes, an enterprise governance, risk, and compliance (GRC) platform powered by agentic AI, has been recognized as a Rising in Cyber 2026 honoree by leading cybersecurity analysts. • The platform uses autonomous AI agents to transform enterprise security operations and streamline compliance workflows across organizations. • The recognition reflects the growing market trend of agentic AI reshaping cybersecurity and enterprise risk management, with AI agents now central to modern security operations.

• Fable Security, a San Francisco-based human risk management platform, was named to the Rising in Cyber 2026 list recognizing the 30 most promising private cybersecurity startups. • The company uses AI and behavioral science to reduce organizational cybersecurity risks by shaping employee behavior and preventing social engineering attacks. • The annual list is independently curated by Notable Capital to highlight innovative early-stage firms addressing critical cyber threats.

• Anthropic announced a new partnership called Mythos on May 8, 2026, aimed at advancing AI-driven cybersecurity defenses amid rising threats. • OpenAI revealed details on its upcoming GPT-5.5 model, featuring enhanced capabilities for threat detection, while ASIC refers to specialized hardware accelerating AI security processing. • The ShinyHunters hacking group claimed responsibility for recent data breaches targeting US tech firms, underscoring persistent risks to enterprise networks.

• A survey by AirMDR released on April 14, 2026, in Palo Alto, CA, reveals 80% of US-based cybersecurity investors intend to increase AI cybersecurity funding next year. • 71% expect decisive ROI from AI tools, with capital shifting toward companies proving operational impact and cost reductions over mere product enhancements. • Investors prioritize defensible AI technologies delivering real outcomes, signaling strong market confidence but heightened selectivity for enterprise-ready solutions.

• French cybersecurity funding has undergone a structural shift driven by AI-powered threats, regulatory requirements, and U.S. expansion, with Q1 2026 alone surpassing all of 2025's funding activity. • The sector is emerging as a frontline investment priority, though a government report warns of a €3 billion funding gap over five years for breakthrough technologies needed for future defense. • The acceleration reflects growing global demand for advanced security solutions as AI capabilities reshape both offensive and defensive cybersecurity strategies.