Topic
Security software category that monitors endpoint devices for malicious activity, enabling detection, investigation and response to threats.
Tanium relaunched Tanium Security Operations around Endpoint Drift, a detector that ranks endpoints acting out of character against their own learned baseline. The bet is that AI-assisted intruders will log in with stolen credentials and run IT's own admin tools, which a list of known-bad files will not catch.
Reality
Huntress's agent, installed after an Akira ransomware attack, flagged a GOST tunnel on a domain controller set up about four hours after encryption began. The evidence that the ransomware ran came from Registry entries, event logs and Akira's own log files left on disk.
Reality
Huntress details four ways attackers who already hold administrator rights add Microsoft Defender exclusions to keep malicious files out of every scan. A registry value can also hide those exclusions from any admin who checks for them.
Reality
Chaotic Eclipse published working code that abuses Falcon's Office macro removal on fully patched Windows 11 25H2 and Server 2025. It is the fourth endpoint product the researcher has dropped exploit code for, and no CrowdStrike response is on record.
Perspective Coverage
5 publishersReality
IRIS C2 found a kernel extension named EndpointSecuritySE in an iOS build Apple released to developers on September 16, along with the entitlement and research-mode checks that decide which clients may read its events.
Reality
The PIVOT program was announced on September 15 with Broadcom, CrowdStrike, Fortinet, Palo Alto Networks and Sophos signed up, and the first comparative results are due in January 2027. MITRE's rival test drew 11 vendors in 2025.
Reality
High-confidence "no problem" precision fell from a roughly 98% target to 90.8% one week past tuning. Closing alerts automatically buys you a monitoring job, not fewer analysts.
Reality