Most bot-management vendors publish no price at all. We collected every figure that is actually on the record — DataDome, AWS WAF Bot Control, reCAPTCHA, hCaptcha, Cloudflare and Imperva — plus the four cost traps that sit behind the headline numbers.
The FBI’s New Orleans field office is probing a breach at identity verification provider IDScan.net after over 153 million U.S. and Canadian driver licenses appeared for sale on the dark web service Nexus.
Microsoft observed Russian hacking group Star Blizzard shifting to large-scale phishing campaigns in 2026, deploying RedFlick malware to compromise over 100 organizations globally, including NGOs and governments supporting Ukraine.
Citrix has released emergency patches for CVE-2026-88779, a memory buffer flaw in NetScaler ADC and Gateway appliances using SAML authentication, which is being actively exploited in denial-of-service attacks and may allow remote code execution.
OpenAI disrupted a coordinated campaign by a China-based rival to extract reasoning capabilities from its AI models using a novel method that manipulated model interactions to bypass encryption.
WaterISAC announced a partnership with Cyware to improve threat intelligence sharing across the water sector following a summer of cyberattacks targeting exposed OT systems and PLCs.
An international law enforcement operation disrupted the KillSec ransomware gang, arresting three suspects and seizing servers and data leak sites, with a 16-year-old identified as the alleged main operator.
The Technical University of Denmark (DTU) confirms a breach of its identity and access management system may have exposed data of up to 200,000 current and former users since 2003.
Attackers exploit weak identity verification during employee onboarding and service desk interactions to gain trusted access, bypassing even strong MFA and Zero Trust controls.
Proofpoint attributed a China-aligned espionage group, TA419, to a phishing operation targeting U.S. AI policy experts by impersonating officials and using a modified Frameless BitB tool to steal Microsoft 365 credentials via adversary-in-the-middle attacks.