EDITORIAL DESK

EDITORIAL DESK

Palo Alto Networks Unveils Cortex XDR One to Reinvent Endpoint Security for the Agentic AI Era

Bangalore, October 2026 : New platform unifies Extended Detection and Response (XDR) with Cortex Agentic Endpoint Security into a single sensor to protect enterprise hosts and autonomous AI agentsPalo Alto Networks, the global cybersecurity leader, today announced Cortex XDR One, a unified endpoint security platform designed to protect enterprises from threats targeting both traditional operating systems and autonomous AI agents. By bringing together Extended Detection and Response (XDR) and Cortex Agentic Endpoint Security into a single interface and lightweight sensor, Cortex XDR One addresses the critical security blind spots created by the rapid enterprise adoption of AI coding agents, co-pilots, Model Context Protocol (MCP) servers, and personal AI tools.Over the past two years, enterprises have increasingly authorised AI agents to interact directly with internal databases, production code, financial ledgers, and customer management systems. Because these agents operate non-deterministically and inherit user permissions, they introduce complex attack vectors such as prompt injection, indirect data poisoning, and unauthorised API calls that traditional Endpoint Detection and Response (EDR) solutions and basic software containers were not built to stop."The expansion of agentic capabilities across enterprise endpoints demands a security posture that treats AI agents with the same rigour and control as traditional system processes," said Orcun Tezel, Vice President, Technical Solutions, Asia Pacific & Japan at Palo Alto Networks. "Just as we pioneered XDR to protect network, identity, and cloud environments, Cortex XDR One expands endpoint protection to govern AI agents at the source, enforce OS-level boundaries, and stop evasive threats in real time."Key features and capabilities of Cortex XDR One:Real-Time AI Inventory and Shadow AI Visibility: Instantly detects, catalogs, and governs all AI artifacts, packages, extensions, and ungoverned "shadow AI" tools installed on enterprise endpoints.Dual-Layer Execution Enforcement: Combines runtime agent guardrails against prompt injection and destructive commands with real-time operating system monitoring to block zero-day exploits and living-off-the-land attacks.On-Sensor Small Language Models (SLMs): Deploys optimised, lightweight language models directly on the endpoint sensor to inspect and block fileless, evasive threats offline without transferring sensitive code to the cloud.Unified Sensor and Cross-Domain Telemetry: Consolidates telemetry onto a single sensor to stitch together end-to-end attack chains, reducing false positives by up to 95% and enabling rapid automated remediation.Flexible Deployment Options: Organisations can deploy Cortex Agentic Endpoint Security as a standalone module alongside third-party EDR solutions using a targeted sensor, or natively integrate it through the full Cortex XDR One platform.Managed Support via Unit 42: Customers can pair XDR One with Unit 42 Managed Detection and Response (MDR), which now includes Managed Agentic Endpoint Security for proactive threat hunting and AI risk governance.The technology powering Cortex Agentic Endpoint Security stems from Palo Alto Networks' integration of Koi, an innovative agentic security startup whose capabilities were initially deployed internally by Palo Alto Networks' InfoSec team.AvailabilityCortex XDR One and Cortex Agentic Endpoint Security are available immediately. For more information, read the blog.About Palo Alto NetworksPalo Alto Networks (NASDAQ: PANW), the global AI cybersecurity leader, protects our digital way of life with a comprehensive portfolio of cybersecurity solutions and platforms across Network, Cloud, Security Operations, AI and Identity. Trusted by 75,000+ customers and powered by Unit 42 threat intelligence, our AI-driven platforms eliminate complexity, empowering enterprises to modernise with confidence and securing the speed of innovation. Explore the future of security at www.paloaltonetworks.com.Palo Alto Networks, Cortex, Cortex AgentiX, Chronosphere and the Palo Alto Networks logo are trademarks of Palo Alto Networks, Inc. in the United States and in jurisdictions throughout the world. All other trademarks, trade names, or service marks used or mentioned herein belong to their respective owners. Any unreleased services or features (and any services or features not generally available to customers) referenced in this or other press releases or public statements are not currently available (or are not yet generally available to customers) and may not be delivered when expected or at all. Customers who purchase Palo Alto Networks applications should make their purchase decisions based on services and features currently generally available.

EDITORIAL DESK

Deep tech startup Viridian Ingni Propulsion raises 1.47 Cr in pre-seed round led by Inflection Point Ventures

Bangalore, October 2026 :Viridian Ingni Propulsion, is incubated at IIT Madras Research Park, building complete electric propulsion ecosystems, motor, controller and firmware in-house.? The round takes total funding to 1.47 crore through CCPS, alongside ?3.75 lakh in grants from SIPCOT, MeitY Startup Hub, NIDHI PRAYAS, IIT Madras RTBI and Cummins CSR.? Funds will be deployed towards pilot production tooling, ARAI/ICAT certification and homologation, motor controller firmware validation, key engineering and business hires, and working capital for first customer deliveries.? Inflection Point Ventures has invested over ?900 crore across 280+ startups and backed 16 startups in Q1 2026 alone.Chennai, 29 October: Deeptech focused Viridian Ingni Propulsion, a Chennai-based propulsion technology company, has raised ?1.47 crore in a pre-seed round led by Inflection Point Ventures. The company has additionally received ?53.75 lakh in grants from SIPCOT (Tamil Nadu Government), MEITY Startup Hub, NIDHI PRAYAS under the Department of Science and Technology and Ministry of Heavy Industries, the IIT Madras Research Park's RTBI programme, and Cummins CSR.The fresh capital will enable The Propulsion Company to move from validated prototypes into pilot production. Key priorities include developing motor stamping tooling and dies, setting up a pilot production line and small manufacturing facility, completing ARAI/ICAT certification and homologation, validating motor controller firmware, key engineering and business teams, and working capital for first customer deliveries against existing letters of intent.The Propulsion Company develops complete electric propulsion systems- motor, controller and firmware design and validation in-house. Unlike most propulsion suppliers in India who build only one part of this stack, Viridian delivers all three as a single validated unit. Its system systems are built for applications ranging from electric vehicles, drones, robotics and industrial machinery.Mitesh Shah, Co-founder, IPV, said, “Viridian Ingni is addressing a critical gap in India’s EV and propulsion ecosystem by developing its entire technology stack, including motors, controllers and firmware, in-house. Its ability to adapt motor technology across applications, from e-rickshaws to drones, sets it apart in both domestic and global markets. We believe this engineering-led team has the potential to make Indian-built propulsion systems the preferred choice for OEMs. IPV is excited to support the company as it moves towards pilot production and customer deliveries.Viridian Ingni Propulsion was founded in February 2024 by Sriram G, Founder & CEO, who brings close to 14 years of experience in electric vehicle and propulsion systems engineering, including seven years at IIT Madras's EV research centres before starting the company.Commenting on the investment, Sriram G, Founder & CEO, The Propulsion Company, said, “When we started Viridian Ingni, the conviction was simple, India designs very few of its own propulsion systems, and almost none end-to-end. We build the motor, the controller and the firmware together, and we choose the right magnet technology for each application rather than forcing one solution everywhere. IPV backed that thesis early and their network has already opened doors that would have taken us far longer to reach on our own. This round takes us from validated prototypes into pilot production, certification and our first customer deliveries. The goal is to make Indian-designed propulsion the default choice for EV, drone and industrial OEMs, not the fallback.”The company tailored magnet technology to each use cases : rare-earth-free ferrite PMa-SynRM motors for e-rickshaws, two-wheelers, HVAC, compressors and solar pumps, and rare-earth PMSM motors for drones, cobots, AGVs and marine applications where power density is critical. A shared design platform across product lines is intended to lower incremental cost and time-to-market for each new application, while also reducing Indian OEMs' reliance on imported rare-earth magnets from China.Viridian Ingni is currently pre-revenue, moving from validated prototype to pilot production, with a five-member, engineering-led team operating out of IIT Madras Research Park, Chennai.The company holds letters of intent for 350 motors across two customers, Crop Xplore and Yali Mobility, and is targeting the automotive EV, drone/UAV, robotics and industrial machinery markets as it moves from validated prototype to pilot production.India's EV motor market was valued at approximately USD 0.90 billion in 2024 and is projected to reach USD 2.89 billion by 2030, growing at a CAGR of around 21.5 percent, according to MarkNtel Advisors. Globally, the EV traction motor market was estimated at USD 12.57 billion in 2024 and is projected to reach USD 74.17 billion by 2030 at a CAGR of about 30.2 percent, per Grand View Research.[Note: third-party estimates for the global traction motor market vary widely by report and scope; the source above should be verified before publishing.]About Viridian Ingni Propulsion:Founded in February 2024 by Sriram G and incubated at IIT Madras Research Park, Chennai, Viridian Ingni Propulsion Pvt. Ltd. designs and builds complete electric propulsion systems, motor, controller and firmware, for electric vehicles, drones, robotics and industrial machinery. The company's rare-earth-free motor technology reduces Indian OEMs' dependence on imported rare-earth magnets, while its platform approach lets a single design architecture serve multiple applications.About Inflection Point Ventures:Inflection Point Ventures (IPV) is an angel investing platform with over 9,600 CXOs, HNIs, and Professionals investing together in startups. The firm supports new-age entrepreneurs by providing them with monetary and experiential capital and connecting them with a diverse group of investors.

EDITORIAL DESK

Palo Alto Networks Introduces Cortex Cloud SaaS Security to Protect Connected Enterprise Environments

Bangalore, October 2026 : New capability unifies posture, identity, data, and AI security across SaaS and cloud environmentsPalo Alto Networks, the global cybersecurity leader, today announced Cortex Cloud SaaS Security, bringing SaaS security directly into the broader cloud security experience, unifying posture, identity, data, and AI security across SaaS and cloud environments. This integrated approach helps the connected enterprise safeguard applications against misconfigurations, AI risks and data exposure as the attack surface expands.Modern enterprises operate across an increasingly interconnected ecosystem of SaaS applications, cloud infrastructure, identities and sensitive data. AI agents and third-party integrations continue to deepen these connections, creating new pathways for attackers to exploit misconfigurations, excessive permissions and exposed resources. However, security remains fragmented across SaaS and cloud environments, limiting visibility into how individual risks connect and where attackers could move next.Siddharth Deshpande, Director of Industry Solutions, Asia Pacific and Japan, at Palo Alto Networks, said, “As enterprises connect AI agents to their business applications, they also expand access to sensitive data and critical systems. An excessive permission or misconfiguration in one application can create exposure across connected environments. Security teams need to understand those relationships, identify which risks matter most and act quickly. Cortex Cloud SaaS Security brings SaaS and cloud risks into a unified view, helping organisations protect sensitive information and accelerate investigation and remediation through agentic AI workflows.”Key Capabilities of Cortex Cloud SaaS Security:Unified Visibility Across the Enterprise: Cortex Cloud SaaS Security provides complete visibility across SaaS and cloud, including 100 SaaS applications and the data, identities and AI within them.Prioritisation of Connected Risks: Cortex Cloud SaaS Security connects SaaS exposures with data, identity, AI and cloud risk to uncover attack paths and focus on the most critical risks.Accelerated Response with Agentic AI: Integrations with Cortex AgentiX helps accelerate security investigations and remediation through agentic AI-driven workflows.As SaaS, cloud and AI environments converge, isolated security assessments can no longer provide the context needed to manage enterprise risk. Cortex Cloud SaaS Security brings posture, identity, data, AI and threat security together to help organisations understand their connected attack surface and act on emerging exposures.For more information, read the blog.About Palo Alto NetworksPalo Alto Networks (NASDAQ: PANW), the global AI cybersecurity leader, protects our digital way of life with a comprehensive portfolio of cybersecurity solutions and platforms across Network, Cloud, Security Operations, AI and Identity. Trusted by 75,000+ customers and powered by Unit 42 threat intelligence, our AI-driven platforms eliminate complexity, empowering enterprises to modernise with confidence and securing the speed of innovation. Explore the future of security at www.paloaltonetworks.com.Palo Alto Networks, Cortex, Cortex AgentiX, Chronosphere and the Palo Alto Networks logo are trademarks of Palo Alto Networks, Inc. in the United States and in jurisdictions throughout the world. All other trademarks, trade names, or service marks used or mentioned herein belong to their respective owners. Any unreleased services or features (and any services or features not generally available to customers) referenced in this or other press releases or public statements are not currently available (or are not yet generally available to customers) and may not be delivered when expected or at all. Customers who purchase Palo Alto Networks applications should make their purchase decisions based on services and features currently generally available.XXX

EDITORIAL DESK

Kaspersky GReAT uncovers attack targeting government-only Windows system in Asia

Bangalore, October 2026Kaspersky's Global Research and Analysis Team (GReAT) has uncovered an attack targeting a customized version of Windows 10 used exclusively by government organizations in an Asian country. The attackers used legitimate software components to launch NetamLoader, a previously unknown malware framework that can receive and run additional code while concealing its activity.Kaspersky identified one victim through its threat monitoring network and has not linked the attack to any known threat group. The malware was built for this specific operating system: among other steps, it removes selected entries from the logs of the system's own update component.The investigation began in the first half of 2026, when Kaspersky detected a suspicious configuration file inside an archive stored in a Windows update folder. Most of the accompanying programs were legitimate, including components of the third-party patch management tool Patch My PC and Microsoft signed module. The attackers used modified supporting files to make this genuine software load malicious instructions. The location and contents of the archive point to a possible software supply chain attack, in which attackers abuse software delivery or update processes to reach their targets. Researchers did not observe how the archive reached the victim, and the findings do not indicate that Patch My PC or its distribution systems were compromised.NetamLoader unpacks its malicious content through several layers of encoding, compression and encryption. It then moves execution into a legitimate Windows process, making the connection to the original program harder to trace. The framework also interferes with an anti-malware scanning function and deletes files that could help investigators reconstruct the attack.Once active, NetamLoader contacts an attacker-controlled server to receive further instructions and configuration changes. The configuration researchers analyzed includes a delay of 20 to 40 minutes before the first connection. If the server provides no valid response, the malware waits 22 to 28 hours before trying again. These delays can leave short monitoring sessions with little network activity to examine."Technological sovereignty has become a priority for many governments, and operating systems are often where it starts. Running your own platform gives you control, but it also means securing the entire ecosystem around it, from update channels to the maintenance tools it relies on, and that ecosystem takes time to mature. This case shows why defenders need to look at how components interact, not only whether each program is legitimate," Sergey Lozhkin, Head of Kaspersky GReAT Research Center, APAC& META.Kaspersky products detect this threat as HEUR:Trojan.MSIL.NetamLoader.gen, Trojan.MSIL.Zapchast.* and Trojan.Script.Agent.*. The full technical report, including indicators of compromise, is available on Securelist.To protect against similar threats, Kaspersky recommends:Utilize Kaspersky Threat Intelligence Services for access to up-to-date threat feeds, behavior-based IoCs, and detailed threat hunting reports. Compiled and powered by the expertise of Kaspersky research teams, including GReAT, it empowers analysts to leverage data from recent investigations, including this one, and examine unfamiliar samples before they reach production environments.Audit software update channels, because the attackers placed their package in the folder Windows uses for downloaded updates. Monitor these folders for unexpected executables and configuration files, verify the origin of every update package and allow third-party management tools to run only from approved locations.Detect stealthy behavior on endpoints with Kaspersky Next EDR Expert. It correlates suspicious activity such as a signed program loading code through a modified configuration file, a Windows system process connecting to external servers and tampering with anti-malware scanning, which individually might pass for routine system activity.Monitor network traffic with Kaspersky Anti Targeted Attack (KATA). The platform spots infrequent, encrypted connections to unfamiliar external servers, including those hidden behind content delivery networks, and helps teams track malware that waits hours or even days between check-ins.Store logs outside endpoints with Kaspersky SIEM, because NetamLoader deleted system cache files, .NET usage logs and entries from the update component's records. Centralized collection preserves the evidence attackers try to erase and turns unexplained gaps in local logs into an alert.About the Global Research & Analysis TeamEstablished in 2008, Global Research & Analysis Team (GReAT) operates at the very heart of Kaspersky, uncovering APTs, cyber-espionage campaigns, major malware, ransomware and underground cyber-criminal trends across the world. Today GReAT consists of 35+ experts working globally – in Europe, Russia, Latin America, Asia and the Middle East. Talented security professionals provide company leadership in anti-malware research and innovation, bringing unrivaled expertise, passion and curiosity to the discovery and analysis of cyberthreats.About KasperskyKaspersky is a global cybersecurity and digital privacy company founded in 1997. Innovating the industry with a Cyber Immunity approach, Kaspersky safeguards consumers, businesses, critical infrastructure, and governments from cyberthreats, with over a billion devices protected to date.Kaspersky ensures Cybersecurity True to Business, focusing on providing clear outcomes, protecting revenue, easing workloads and preventing downtime. Kaspersky’s deep threat intelligence and security expertise is constantly transforming into innovative solutions and services for organizations of every size, from small businesses to large enterprises, combining proven AI-driven protection technologies with simple management and expert support.Recognized in independent tests and trusted by millions of individuals worldwide and nearly 200,000 organizations, Kaspersky helps detect threats earlier, respond faster and operate with greater confidence and freedom, protecting what matters most to our clients. Learn more at www.kaspersky.com

EDITORIAL DESK

Vertiv India Expands into South Asia Through New Distribution Partnership with Inflow Technologies

Bangalore, October 2026 : The association allows Vertiv India to offer customers in new markets access to their power, thermal, and IT infrastructure solutions.Vertiv (NYSE: VRT), a global leader in critical digital infrastructure, today announced a distribution partnership with Inflow Technologies, a Singapore-based distributor of Information and Communication Technology (ICT) products and services. The agreement expands Vertiv India's presence in neighbouring markets such as Bangladesh, Bhutan, the Maldives, Nepal, and Sri Lanka.With Inflow, customers in the region will have access to Vertiv's uninterruptible power supply (UPS) systems, precision cooling solutions for data centre and edge environments, and IT racks and enclosures, along with technical training and product support from Vertiv. Access to the portfolio is expected to resonate with enterprise IT teams and system integrators as they scale infrastructure across these markets.The alliance comes at a time when digital infrastructure investments are accelerating across South Asia. Governments and enterprises in these markets are advancing digital transformation initiatives and cloud adoption driving demand for resilient power and thermal infrastructure, which creates new opportunities for critical digital infrastructure providers such as Vertiv.“Combining Vertiv solutions and capabilities with the Inflow Technologies’ strong local partner network and financial enablement, we can improve market reach, strengthen channel confidence and accelerate business momentum across the adjacent markets. Our focus is not just on expanding distribution, but on creating a stronger ecosystem that enables our partners and customers to grow with us,” said Reginald Borges, Director – Business Development, International Operations, Vertiv India."This partnership brings together what each of us does best to accelerate infrastructure growth across South Asia. Inflow will act as a growth engine for Vertiv’s journey in the region. Working closely with Vertiv’s engineering and product teams, we will help customers build the resilient, energy-efficient power and cooling infrastructure their businesses need as they scale. Together, we are committed to building the region's ICT ecosystem and supporting long-term, sustainable growth for our customers and channel partners," said Ms. Kousalya Narayan, Vice President, South Asia Channel, Inflow Technologies.For more information about the Vertiv channel partners program visit Vertiv.com.# # #About VertivVertiv (NYSE: VRT) brings together hardware, software, analytics and ongoing services to enable its customers’ vital applications to run continuously, perform optimally and grow with their business needs. Vertiv solves the most important challenges facing today’s data centers, communication networks and commercial and industrial facilities with a portfolio of power, cooling and IT infrastructure solutions and services that extends from the cloud to the edge of the network. Headquartered in Westerville, Ohio, USA, Vertiv does business in more than 130 countries. For more information, and for the latest news and content from Vertiv, visit Vertiv.com.Forward-Looking StatementsThis release contains forward-looking statements within the meaning of the Private Securities Litigation Reform Act of 1995, Section 27 of the Securities Act, and Section 21E of the Securities Exchange Act. These statements are only predictions. Actual events or results may differ from those in the forward-looking statements set forth herein. Readers are referred to Vertiv’s filings with the Securities and Exchange Commission, including its most recent Annual Report on Form 10-K and any subsequent Quarterly Reports on Form 10-Q for a discussion of important risk factors concerning Vertiv and its operations. Those risk factors and risks related to the proposed transaction, among others, could cause actual results to differ materially from historical performance Vertiv is under no obligation to, and expressly disclaims any obligation to, update or alter its forward-looking statements, whether as a result of new information, future events or otherwise.

EDITORIAL DESK

Gartner Identifies the Top AI Trends in Infrastructure and IT Operations for 2027

Bangalore, October 2026 : Heads of I&O Must Capitalize on These Trends to Accelerate Autonomous Operations and Support Enterprise-Scale AI InitiativesGartner, Inc., a business and technology insights company, has identified the top AI trends in infrastructure and IT operations (I&O) for 2027.Heads of I&O are increasingly being tasked with improving IT operations while enabling AI initiatives across the business. A Gartner survey of 272 heads of I&O conducted between April and May 2026 found that 58% believe scaling proof of AI concepts to I&O adoption will be an important priority in the next 12 months.“AI is creating one of the most significant shifts the I&O function has ever faced,” said Jonathan Forest, VP Analyst at Gartner. “Rather than trying to address every aspect of AI simultaneously, heads of I&O should focus on a small number of strategic investments that deliver meaningful impact.”Gartner identified five AI trends that heads of I&O should focus now to improve operational efficiency with AI, optimize costs, build the hybrid infrastructure needed to support AI inference, address converging operational and cybersecurity risks, and strengthen I&O’s role as the enterprise AI platform orchestrator (see Figure 1):Figure 1: Top AI Trends in Infrastructure and IT OperationsAI Agents Accelerate Autonomous IT OperationsAgentic AI in I&O marks a shift to goal-driven software agents that can execute complex IT workflows with minimal human intervention. As operational complexity, scale and velocity increase, organizations are deploying AI agents to automate tasks such as incident triage, change validation and remediation.By 2030, Gartner predicts that 50% of organizations will use AI agents with minimal human involvement in IT operations, up from nearly 0% in 2026.“AI agents are driving a shift from reactive, human-in-the-loop operations to proactive, human-on-the-loop operations,” said Forest. “Heads of I&O who fail to restructure their organization around agentic AI risk higher costs, poor operational agility and performance, and ultimately, irrelevance.”Agentic AI Creates a Token Economics ChallengeThe transition from conversational AI to autonomous agentic AI workflows is driving a significant increase in token consumption. Unlike traditional AI interactions, agentic systems perform complex multistep tasks that require substantially more tokens, creating new cost management challenges for I&O teams.Through 2027, Gartner predicts that enterprises implementing AI agents in IT operations using uncapped variable pricing models tied to token usage will exceed initial cost expectations by more than 50%, compared with organizations using predictable subscription and bundled pricing models.Gartner recommends a strict “no telemetry, no deployment” policy to eliminate blind spots in AI spending and token usage.AI Inference Drives the Rise of Hybrid AI InfrastructureMost enterprises are consuming existing foundation models through inference rather than training models from scratch. Because enterprise data resides across a mix of public clouds, private data centers and edge environments, AI infrastructure is becoming increasingly hybrid, a shift that is being accelerated by privacy, cost, performance and data sovereignty requirements.By 2029, Gartner predicts that 80% of large enterprises will operate production AI workloads across at least three infrastructure environments, including public cloud, neoclouds, on-premises data centers and edge locations. AI Converges IT Operational Risk and Cybersecurity RiskAs AI becomes increasingly embedded in enterprise infrastructure, operational and cybersecurity risks are becoming more interconnected. Shared AI tooling, telemetry and the growing use of AI agents are driving closer collaboration between I&O and security teams to improve resilience, risk management and operational efficiency.By 2030, Gartner predicts that 25% of enterprises will merge their network operations center (NOC) and security operations center (SOC), up from 5% in 2026, realizing an over 25% reduction in total spend on tooling and staff resources.I&O Emerges as the Enterprise AI Platform OrchestratorAI deployments across cloud, data center and edge environments are increasing the need for a coordinated approach to managing AI infrastructure, governance, security and operations. Consequently, I&O is evolving from a traditional gatekeeper role to the orchestrator of the enterprise AI platform, enabling the business to deploy and scale AI in a reliable, secure and cost-effective manner.Through 2030, Gartner predicts that organizations without a strong I&O function driving AI infrastructure design, architecture and support will be over twice as likely to fail in their AI initiatives.“The high cost of AI infrastructure leaves little room for error, placing I&O at the center of enterprise AI success,” said Forest. “Heads of I&O must elevate their teams’ capabilities, reduce technical debt and shift from reactive operations to proactively enabling enterprise AI.”Additional Insights AvailableGartner clients can read more in Top AI Trends in Infrastructure and IT Operations for 2027.Gartner is the World Authority on AIGartner is the indispensable partner to C-Level executives and technology providers as they implement AI strategies to achieve their mission-critical priorities. The independence and objectivity of Gartner insights provide clients with the confidence to make informed decisions and unlock the full potential of AI. Clients across the C-Level are using Gartner's proprietary AskGartner AI tool to determine how to leverage AI in their business. With more than 2,500 business and technology experts, 6,000 written insights, as well as more than 4,000 AI use cases and case studies, Gartner is the world authority on AI. More information can be found here.About Gartner for Infrastructure & IT Operations LeadersGartner for Infrastructure & IT Operations Leaders helps heads of I&O reinvent how they deliver value for the business. Additional information is available at https://www.gartner.com/en/infrastructure-and-it-operations-leaders.Follow news and updates from Gartner for Infrastructure & IT Operations Leaders on X and LinkedIn. Visit the Gartner Newsroom for more information and insights.About GartnerGartner (NYSE: IT) delivers actionable, objective business and technology insights that drive smarter decisions and stronger performance on an organization's mission-critical priorities. To learn more visit gartner.com.# # #

EDITORIAL DESK

Cohesity Data Cloud Becomes the First Cloud Recovery Method Validated for Interoperability with IBM Terraform Self-Managed

Bangalore, October 2026 : Organizations can now rapidly rebuild cloud applications after a cyberattack, using Terraform code to restore the declared configuration and Cohesity Data Cloud backups to restore the latest usable application data Cohesity, the leader in AI and data security, today announced that HashiCorp, an IBM Company, has validated the interoperability of Cohesity Data Cloud’s cloud rebuild capabilities with Terraform Self-Managed. Organizations can now quickly recover cloud applications – infrastructure, configuration, and, most importantly, data – after a destructive cyberattack. The Terraform product can recreate the compromised declared configuration; Cohesity Data Cloud then restores the latest usable application data from backup.This is the first cloud recovery method IBM has validated for interoperability with Terraform Self-Managed, self-hosted platform for defining and managing cloud infrastructure as code. Cloud rebuild is part of Cohesity Data Cloud Enterprise Edition.Rebuild the declared configuration and restore the dataAI is increasing the frequency and severity of cyberattacks, and recovery plans haven't kept pace. Cohesity’s 2026 Global Cyber Resilience Report, a Vanson Bourne survey of 3,200 security and IT decision-makers, found that 83% of surveyed organizations said their recovery plans would need moderate or significant changes to handle attacks that use AI to find and exploit software weaknesses. Only 3% say their plans are ready today. Cloud recovery also lags. When an attack compromises a cloud application, IT teams often rebuild it by hand or rely on tools that piece the environment back together using bespoke methods.Cohesity cloud rebuild takes a different approach. It uses an organization’s infrastructure-as-code files, which define its cloud networks, servers, and access permissions, as the blueprint for recovery. Terraform uses the organization's reviewed and approved code to recreate the declared configuration, and Cohesity Data Cloud restores the latest usable backed-up application data. Together, they return the application to a trusted state rather than to a copy that may already contain an attacker's changes.Some recovery tools restore a copy of production as it looked just before an attack, which can include errors or changes made by the attacker. Cloud rebuild instead restores the environment described by the organization’s own reviewed and approved code, returning applications to their declared configuration and restoring protected data from the selected backup.Cohesity cloud rebuild can read applications through Terraform's official interface and runs customers' code unchanged, maintaining record accuracy. Terraform code recreates the declared configuration, while Cohesity restores application data from backup. What’s more, administrators can integrate cloud rebuild into existing incident response and recovery workflows.“Attackers using AI move faster than any team can rebuild by hand. Organizations have already codified exactly what their cloud environments should look like in Terraform. Cohesity uses that code to recreate the declared configuration, then restores the latest usable application data from backup. Teams need both to bring the application back. If you build as code, you can now recover as code,” said Vasu Murthy, chief product officer, Cohesity.“Our customers have asked how they can recover from an attack leveraging Terraform and it's state, and not just build a new environment,” said Tyler Lynch, Outbound CTO, Automation, IBM Software. “We worked with Cohesity to validate how our technologies work together when they use Terraform state to recover cloud applications, the infrastructure they run on, and the data as part of the recovery process.”Cohesity Data Cloud + Terraform Self-Managed: How it worksHere’s what happens from protection through recovery:Map the application. Cloud rebuild reads the organization’s Terraform code and creates a detailed map of each cloud resource that needs protection and the order in which resources should be restored.Save trusted versions. Cloud rebuild backs up both the Terraform code and the application data over time, so teams can choose a recovery point that pairs the intended configuration with backed-up application data.Rebuild step by step. Cloud rebuild recreates the declared infrastructure and configuration from Terraform code, then restores application data from the latest usable backup for that recovery point. For databases such as Amazon RDS, a guided multistep process walks administrators through reconnecting the restored database to the rest of the application.Show the timing gap. Because infrastructure and data can be backed up on separate schedules, Cloud rebuild pairs the closest data backup with the chosen code version and clearly shows how far apart in time the two are. Teams can see which data backup the recovered application will use.AvailabilityCohesity cloud rebuild is available now as part of Cohesity Data Cloud Enterprise Edition. Existing Cohesity customers running Data Protect or Cohesity NetBackup can upgrade to Enterprise Edition to gain access to cloud rebuild and the full breadth of Cohesity’s cyber resilience portfolio.For more information on today’s announcement, read the blog here.About CohesityCohesity protects, secures, and provides insights into the world’s data. As the leader in AI and data security, Cohesity helps organizations strengthen resilience, accelerate recovery, and reduce IT costs. With Zero Trust security and advanced AI/ML, Cohesity Data Cloud is trusted by customers in more than 140 countries, including two-thirds of the Global 500. Cohesity is also backed by industry leaders such as NVIDIA, Amazon, Google, IBM, Cisco, and HPE.Cohesity is certified as a Great Place to Work in multiple countries. Follow Cohesity on LinkedIn?and visit www.cohesity.com to learn more.

EDITORIAL DESK

Vertiv Helps Enterprises Move from AI Pilots to Production

Bangalore, October 2026 : New deployment guide, informed by Vertiv and STL Partners research, helps organizations determine their AI archetypes and where the supporting infrastructure should be locatedWorkload-based approach connects business requirements to right-sized infrastructure models and reference designs to reduce deployment risksHoldings Co. (NYSE: VRT), a global leader in critical digital infrastructure, and Deloitte Center for Integrated Research introduced a collaboration to help enterprises address a critical challenge in moving artificial intelligence from experimentation to production: determining where AI workloads should run and whether the available physical infrastructure can support them.The new Vertiv Designing Infrastructure for Enterprise AI Guide, developed by Vertiv and STL Partners, a digital infrastructure research firm, provides business, IT and facilities leaders with a workload-based framework for making those decisions before committing to an infrastructure plan. Starting with the intended business outcome and AI workload, organizations can evaluate deployment location, infrastructure requirements and facility readiness, then align each workload with an appropriate physical infrastructure model and reference design for further planning and technical validation.The underlying research highlights a critical consideration as enterprises move AI workloads into sustained production: infrastructure readiness can determine where workloads can be deployed and how quickly they can move into production. Available power, cooling, connectivity and operational capacity can determine whether a workload can be supported in an existing facility or requires a different deployment model.The guide translates these considerations into a four-step process: (1) define the intended business outcome and AI workload, (2) evaluate the workload’s scale, performance and operating requirements, (3) determine the most appropriate deployment location and (4) match the workload and location to a physical infrastructure model and reference design.“The next phase of enterprise AI will be shaped not only by models and computing, but also by whether organizations can provide the power, cooling, connectivity and operating environment each workload requires,” said Giordano Albertazzi, CEO of Vertiv. “By starting with the workload, enterprises can make infrastructure decisions earlier, identify constraints sooner and build a more credible path from AI ambition to production.”“The economics and operating requirements of AI change as workloads move into production,” said Nicholas Merizzi, principal, Silicon2Service U.S. Lead, Deloitte Consulting LLP. “Organizations need to consider business value, governance, operating ownership and infrastructure together. Bringing those questions into the planning process earlier gives leaders a stronger basis for deciding where AI workloads should run and how they should be supported over time.”The process recognizes that enterprise AI is a portfolio of workloads rather than a single infrastructure decision. Exploratory workloads may remain in the cloud, while sustained or business-critical workloads may favor hybrid infrastructure or capacity managed by the enterprise. Workloads requiring faster response times, greater control, data proximity or specific model performance may need to run at the edge or in another controlled environment.The workload-specific approach allows public cloud, colocation, enterprise-owned capacity, hybrid environments and edge infrastructure to each play a role. Rather than advocating broadly for or against the cloud, the guide provides a consistent method for determining the appropriate operating environment for each AI workload.The research categorizes enterprise AI workloads into six archetypes covering model development, retraining and four categories of production use. These archetypes help organizations identify workloads with similar performance, operating and infrastructure requirements, creating a more consistent basis for planning. Each workload can then be aligned with one of four physical infrastructure models: Edge AI Cluster, Small AI Cluster, Large AI Cluster and High-Density AI Cluster.The four models provide a starting point for decisions involving power, cooling, controls, connectivity, resilience, operational support and future growth. Corresponding reference designs can then be adapted based on site assessment, workload requirements and detailed engineering.Facility readiness is critical across all four models. The guide helps enterprises evaluate whether a proposed location has sufficient power, cooling, connectivity, operational capacity and room for growth. Conducting this assessment early can help identify infrastructure constraints before they become barriers to deployment.The full guide, Designing Infrastructure for Enterprise AI, details the six workload archetypes, four physical infrastructure models and a four-phase roadmap for planning, deploying and evolving enterprise AI infrastructure. It is available at Vertiv.com.# # #About VertivVertiv (NYSE: VRT) brings together hardware, software, analytics and ongoing services to enable its customers’ vital applications to run continuously, perform optimally and grow with their business needs. Vertiv solves the most important challenges facing today’s data centers, communication networks and commercial and industrial facilities with a portfolio of power, cooling and IT infrastructure solutions and services that extends from the cloud to the edge of the network. Headquartered in Westerville, Ohio, USA, Vertiv does business in more than 130 countries. For more information, and for the latest news and content from Vertiv, visit Vertiv.com.Forward-looking statementsThis release contains forward-looking statements within the meaning of the Private Securities Litigation Reform Act of 1995, Section 27 of the Securities Act, and Section 21E of the Securities Exchange Act. These statements are only a prediction. Actual events or results may differ materially from those in the forward-looking statements set forth herein. Readers are referred to Vertiv’s filings with the Securities and Exchange Commission, including its most recent Annual Report on Form 10-K and any subsequent Quarterly Reports on Form 10-Q for a discussion of these and other important risk factors concerning Vertiv and its operations. Vertiv is under no obligation to, and expressly disclaims any obligation to, update or alter its forward-looking statements, whether as a result of new information, future events or otherwise.

EDITORIAL DESK

The AI Readiness Illusion: 86% of Organizations Say Data Concerns Delay or Derail AI Projects

Bangalore, October 2026 : New Iron Mountain research finds businesses are pushing towards greater AI autonomy without the trusted, well-governed information needed to scale4 in 10 organizations spend at least 41% of their AI project timelines on manual data preparation, while only 39% fall into the report’s ‘digitized and structured’ category, where dark data is centrally managed, indexed and readily usable for analytics and AI.Fragmented and legacy information remains a major barrier. 56% of organizations cite information spread across disconnected systems or departmental silos, while 53% point to legacy formats or physical archives.70% of organizations say they cannot effectively track the lifecycle (origin or journey) of the data used in their AI models.New research from Iron Mountain (NYSE: IRM), a global leader in information management services, reveals a growing gap between AI ambition and readiness as businesses move towards more autonomous AI.Published in Iron Mountain’s new report, The Information Supercycle: Aligning Data, Infrastructure and Capital for AI Scale, the findings show that while 95% of organizations say using data to improve business outcomes is a top priority, 86% have experienced AI project delays or cancellations because of data concerns in the past 12 months.The scale of work still required to make information usable for AI remains significant. 4 in 10 organizations spend at least 41% of their AI project timelines on manual data preparation, while only 39% fall into the report’s ‘digitized and structured’ category, where dark data is centrally managed, indexed and readily usable for analytics and AI.Fragmented and legacy information remains a major barrier. 56% of organizations cite information spread across disconnected systems or departmental silos, while 53% point to legacy formats or physical archives.Those gaps become more consequential as businesses move beyond generative AI towards agentic systems capable of acting across workflows. 70% of organizations say they cannot effectively track the lifecycle (origin or journey) of the data used in their AI models.Varun Gupta, Senior Vice President, Global Product & Solutions Marketing at Iron Mountain, said: “AI readiness is about much more than deploying the latest technology. Enterprises need to know that the information powering their AI is accessible, current and governed, with clear ownership and permissions. As AI agents move from generating answers to taking actions across business workflows, these foundations become essential to scaling AI with confidence.”As AI begins to make and act on more decisions, the consequences extend beyond poor outputs. Fragmented information can create security exposure, compliance and audit risk, higher discovery costs and loss of institutional knowledge. Organizations need continuous lifecycle governance that gives them a clear, auditable view of information from creation to destruction, helping verify the data activated for AI is current, compliant and trusted.###Read Iron Mountain’s new report: The Information Supercycle: Aligning Data, Infrastructure and Capital for AI ScaleAbout Iron MountainIron Mountain Incorporated (NYSE: IRM) partners with more than 240,000 customers across 61 countries, including approximately 95% of the Fortune 1000. We serve as the trusted guardians of what matters most, helping unlock what’s possible. By connecting physical, digital, and intelligent workflows, our lifecycle solutions help organizations realize enterprise value at scale. From complex challenges across information management and digital transformation to data security, data centers, and asset lifecycle management, we empower organizations to navigate an ever-changing landscape to prepare for tomorrow’s possibilities. Our longstanding commitment to safety, security, sustainability, and continuous innovation defines everything we do.To learn more about Iron Mountain, please visit www.IronMountain.com.

EDITORIAL DESK

Gartner Survey Finds Only 13% of CIOs Say Their Enterprise Has Realized Significant or Transformational Value from AI

Bangalore, October 2026 : CIOs Must Strive to be Vanguards, a Cohort That Delivers Better Business Outcomes While Also Reporting High CEO-Perceived AI ValueORLANDO, Fla., October 22, 2026 — Only 13% of CIOs reported their enterprise has realized significant or transformational value from AI so far according to Gartner, Inc., a business and technology insights company. While AI use cases have accelerated over the past two years, the likelihood of use case success remains one-in-five.Alicia Mullery, VP Analyst at Gartner, said, “Volume is not value. AI is creating a reckoning for organizations that lack fundamental disciplines, such as defining use-case value ahead of time and establishing criteria for when to walk away.”The Gartner 2027 CIO and Technology Executive Agenda survey of 2,002 CIOs and technology executives from May to July 2026 found that vanguards, defined as CIOs who are delivering better performance on business outcomes while also reporting high CEO-perceived AI value, are more likely to establish stopping rules at two points in the lifecycle: pilots and production. Defining these guidelines becomes essential as organizations rapidly transition from initial experimentation to active deployment across GenAI, traditional AI and AI agents.Organizations with guidelines for determining when an AI pilot should not move to production are 2.3 times more likely to be vanguards, while those with guidelines for abandoning low-value AI initiatives already in production are 2.6 times more likely to be vanguards. However, only 31% and 17% of CIOs, respectively, reported having these practices in place.“Establishing and adhering to these criteria is a team sport,” said Mullery. “CIOs need business partners who are willing and ready to walk away from low value investments.”CIOs Must Be Responsible for AI Economic StewardshipFunding for AI is increasing, and 58% of CIOs said they have increased pressure to deliver cost improvement from AI. At the same time, 51% of CIOs expected AI to increase the total cost of ownership of technology solutions (see Figure 1). CIOs need to help their organizations govern AI economics across the full lifecycle, not simply approve an initial technology purchase.Figure 1: Changes in Technology Funding, 2026 to 2027“Many organizations continue to apply funding and governance models designed for traditional technology investments such as cloud and SaaS,” said Mullery. “Unlike traditional technology costs, which are largely predictable, AI costs are probabilistic and determined at run time. As enterprise technology funding shifts towards GenAI and agentic AI while investments in legacy infrastructure contract, CIOs will need new approaches to funding, governance and cost accountability.”CIOs Must Bridge the IT Workforce Gap by Expanding What Humans DoOrganizations with explicit plans to redesign roles for a human-agent workforce are 2.4 times more likely to be vanguards, yet a significant execution gap exists, as only 4% of CIOs reported having such plans in place.“While many leaders assume AI will primarily serve to reduce technology headcount, the true vanguard differentiator lies in workforce redesign,” said Mullery.This workforce transformation provides the essential foundation for understanding headcount trends: as AI lowers the cost and effort required to produce technology, overall demand for technology work actually increases. This creates a dual workforce shift where IT headcount can grow, with 40% of respondents expecting to increase IT headcount in 2027, particularly in cybersecurity and data and analytics (see Figure 2), while roles simultaneously compress and expand.Figure 2: Expected Changes in Headcount within IT Functional Sub-teams Within 12 Months (Percentage of Respondents)“Rather than maintaining static job definitions, Vanguards recognize that as AI takes on specialized tasks, the boundaries between established technology jobs begin to blur,” said Mullery. “For example, designers can increasingly perform testing activities, while testers participate in design. Consequently, organizations will require fewer distinct role types, even as the span of responsibility within each role expands.”Additional Insights AvailableGartner clients can read more in Bridging the AI Trough: 3 Gaps To Close for the 2027 CIO and Technology Executive Agenda.Non clients can learn more here.Gartner is the World Authority on AIGartner is the indispensable partner to C-Level executives and technology providers as they implement AI strategies to achieve their mission-critical priorities. The independence and objectivity of Gartner insights provide clients with the confidence to make informed decisions and unlock the full potential of AI. Clients across the C-Level are using Gartner's proprietary AskGartner AI tool to determine how to leverage AI in their business. With more than 2,500 business and technology experts, 6,000 written insights, as well as more than 4,000 AI use cases and case studies, Gartner is the world authority on AI. More information can be found here.Gartner IT Symposium/XpoGartner IT Symposium/Xpo is the world's most important gathering for CIOs and other IT executives. CIOs and IT executives rely on these conferences to learn how to become agents of change in their organizations and harness AI for successful digital transformation. Follow news and updates from the conference on X and LinkedIn using #GartnerSYM, and on the Gartner Newsroom.Upcoming dates and locations for Gartner IT Symposium/Xpo include:November 4-6, 2026 | Yokohama, JapanNovember 9-12, 2026 | Barcelona, SpainNovember 16-18, 2026 | Kochi, IndiaAbout Gartner for IT LeadersGartner for IT Leaders provides actionable, objective insight to CIOs and IT leaders to help them drive their organizations through digital transformation and lead business growth. Additional information is available at www.gartner.com/en/information-technology.Follow news and updates from Gartner for IT Leaders on X and LinkedIn using #GartnerIT. Visit the IT Newsroom for more information and insights.About GartnerGartner (NYSE: IT) delivers actionable, objective business and technology insights that drive smarter decisions and stronger performance on an organization's mission-critical priorities. To learn more visit gartner.com.

EDITORIAL DESK

HyperVerge Becomes First Indian Identity Verification Provider to Pass Independent PAD Level 3 and Deepfake Injection Attack Evaluation

Bangalore, October 2026 : In addition to IAD level 2, company also clears ISO/IEC 30107-3 PAD Level 3, the highest tier for physical spoof detection, becoming the first Indian provider independently tested against both deepfakes and masksHyperVerge, a leading AI-powered customer onboarding and fraud prevention company, today announced that it has become the first and only company in India successfully passed evaluation under European CEN/TS 19099 standard for Injection Attack Detection (IAD -Level 2). At the same time, the company also passed the ISO/IEC 30107-3 Presentation Attack Detection (PAD) Level 3 evaluation, the highest level in the standard. This dual achievement makes HyperVerge the only Indian digital identity technology provider with independent, third-party verification proving its systems can stop both advanced physical face spoofs and digital deepfakes.Fraudsters have traditionally tried to fool identity systems by holding photos, masks or altered documents in front of a camera. Injection attacks bypass the camera altogether: the attacker uses a virtual camera, a rooted phone, an emulator or a hooked function to push a manipulated image or video directly into the onboarding system, so that a deepfake appears to come from a real customer completing a live check.Presentation attack detection, tested under ISO/IEC 30107-3, covers the first class. Level 3 is its most demanding tier: evaluators have days and a budget to build custom silicone masks and sculpted artefacts for specific targets. Injection attack detection, tested under CEN/TS 18099, covers the second. CEN/TS 18099 was published by the European Committee for Standardization in 2024 and is now referenced for remote identity proofing under eIDAS 2.0. ISO/IEC 30107-3 has been the international benchmark for presentation attack testing since 2017. Together they are the two published frameworks a liveness system can be independently measured against.Independent evaluations like the one HyperVerge has achieved against global and European standards offers risk, security and compliance leaders verifiable proof of system defense.This matters in India because banks, NBFCs, fintech companies and insurers onboard millions of customers remotely, and the cheapest way to defeat a video-KYC journey is no longer a mask. It answers the most important question on the minds of BFSI leaders, “How good is the technology against fraud prevention?” HyperVerge cleared both global standards with results well within thresholds. This ensures injection attacks and deepfakes are stopped while genuine users get great customer experience.“Attackers don’t stick to one fraud playbook. They may use physical masks in one instance and AI generated identities or manipulate video in another,” said Kedar Kulkarni, Co-founder and CEO of HyperVerge. “These independent evaluations give banks, financial institutions, insurers and fintech companies objective evidence of how our technology performs against sophisticated attacks, while maintaining a seamless experience for genuine users. We will continue to invest in fraud prevention so legitimate customers can access financial services quickly while bad actors face stronger barriers.”What exactly do these certifications test for and how rigorous are the tests?A third-party laboratory BixeLab in Australia evaluated HyperVerge’s defenses against fraud attacks against European standards through hundreds of genuine and fraudulent attempts across Android, iOS and web development kits. The testing covered attacks involving virtual cameras, USB capture devices, deepfake and face-swap videos. The evaluation followed CEN/TS 18099, a technical specification designed to test whether biometric systems can identify manipulated data injected during digital verification.The certification independently verifies HyperVerge’s ability to detect attacks that use deepfakes, face swaps, virtual cameras and other methods to insert manipulated identity data into a digital onboarding journey.Additionally, the ISO/IEC 30107-3 PAD Level 3 evaluates biometric systems against sophisticated presentation attacks. Testers spend days crafting hyper-realistic 3D presentation attack instruments like medical-grade silicone masks, latex coverings, wax molds and customized sculptures. They tune these artifacts to mimic human skin texture, facial depth and light reflectivity then manipulate ambient light, contrast, angles and device orientations to maximize the realism of every attempt.This balance is important for financial institutions. Security systems that miss attacks expose organizations to fraud. Systems that frequently reject genuine customers cause delays, increase manual reviews and drive people away during onboarding.“BixeLab’s evaluators approached our system the way a well-resourced attacker would. They rooted a device and concealed the root, decompiled and hooked our SDK to intercept the camera feed, and injected deepfake and face-swap video through virtual cameras and emulators across Android, iOS and web,” said Hariprasad PS, Head of AI at HyperVerge. “HyperVerge recorded a 0% false acceptance rate on both evaluations: not one deepfake, injected video or physical artefact was accepted as genuine. On the presentation attack test, every genuine user was verified, a 0% user-level false rejection rate. This outcome reflects several years of work on the capture layer itself.”How this ties to HyperVerge’s mission to reduce financial fraudFor HyperVerge, the certification marks another step in its effort to build trusted identity infrastructure from India for organizations around the world.HyperVerge builds its identity verification and fraud prevention technology in-house. Its AI models support face matching, liveness detection, deepfake detection, document verification, identity duplication and other checks that help organizations distinguish genuine customers from fraudulent ones. HyperVerge designs its technology to work in real time, including on low-end devices and low-bandwidth networks.“Every fake identity that enters the financial system creates a problem that banks must investigate later,” Kedar Kulkarni added. “Stopping that identity during onboarding protects the institution, its customers and the wider financial ecosystem.”Note to the EditorHyperVerge has processed 2 billion transactions on its platform so farThe platform has detected and stopped 55 million fraud attempts till dateHyperVerge serves 500+ customers today, in geographies such as India, US, Vietnam, Indonesia, Philippines, Singapore, Nigeria, and Malaysia.Revenue grew 21.16% year on year in FY26, up from 15.12% in FY25 and following 38.99% in FY24.Active customer count grew 5.27%, 40.65%, and 65.20% over the same three years, pointing to deeper expansion within the existing base.About HyperVergeHyperVerge is an AI-first identity verification and fraud prevention platform that helps banks, NBFCs, fintechs, insurers, and digital platforms onboard real customers in seconds while stopping deepfakes, synthetic identities, and fraud before they get in. HyperVerge's models run in real time even on low-end devices and low-bandwidth networks. The company has crossed 2 billion verifications. Their key customers include L&T Finance, IIFL Finance, AngelOne, Groww, Swiggy, Home Credit, Aditya Birla Health Insurance, and Suryoday Small Finance Bank, etc. HyperVerge is headquartered in India with a growing footprint across Southeast Asia and the United States.

EDITORIAL DESK

53 OpenJDK Vulnerabilities Disclosed Today Set an All-Time High; Azul Patches Them All

Bangalore, October 2026 : Azul’s Security-only, Stability-first™ updates can be deployed immediately to counter the speed of agentic AI threatsAzul, the trusted leader in enterprise Java for today’s AI-first world, today released its October Security-only, Stability-first™ updates for Azul Core that are immediately deployable to address all 53 vulnerabilities disclosed in the latest OpenJDK quarterly update. Azul’s Security-only, Stability-first updates contain security fixes and nothing else: no new features, enhancements or unrelated changes that can cause problems. The number of vulnerabilities disclosed in this quarter’s OpenJDK release is the most in a single update in well over a decade and 7x greater than the two-year average of 7.6 Common Vulnerabilities and Exposures (CVEs) per quarter.OpenJDK quarterly updates that include the fixes to these CVEs also include more than 150 code changes unrelated to security. Azul is the only vendor to offer both monthly and quarterly updates scoped to just security fixes. Enterprises can deploy Azul’s Security-only, Stability-first updates to production immediately and safely to remediate critical vulnerabilities. Other OpenJDK distributions bundle non-security bug fixes, enhancements and even features in their updates, often causing regressions. While such regressions may get fixed with follow-on updates, they can significantly delay the deployment of urgent security fixes.AI Is Exposing Flaws and Enabling Exploits Faster than EverCSO recently reported that researchers using an AI tool found a 13-year-old remote code execution flaw in Apache ActiveMQ in about 10 minutes. Two weeks after disclosure, nearly 6,500 internet-facing instances were still unpatched. In a case documented by GreyNoise, a suspected attacker used hundreds of AI agents to chain two zero-day flaws in PaperCut NG/MF, going from an empty workspace to remote code execution in under four hours. The agents ultimately reached at least 440 instances across 395 organizations in 48 countries, with full domain administrator control in seven minutes.Java has been running mission-critical systems for more than 30 years, making it one of the most battle-tested platforms in enterprise computing. But AI is now exposing flaws that survived years of testing and review. Researchers are using it to uncover vulnerabilities in decades-old code, while threat actors use agentic AI to find and exploit them at a speed and scale never seen before. Because the vast majority of enterprises rely on Java for production applications and infrastructure, the impact will be felt in every industry and region. And the risk is immediate, for three reasons:The skill barrier is falling. AI lets less-skilled attackers do work that once required experts.Attackers are outpacing defenders. Mean time to exploit (MTTE) has shrunk to -7 days, meaning exploitation often begins before a patch is available, while the median enterprise patch cycle is 43 days.It is no longer safe to delay addressing low-severity CVEs. AI can chain even low-severity CVEs into effective and significant attacks, multiplying the number of exploitable paths.Enterprises’ Patch Deployment Cycles Have Not Kept Pace With AI-Speed AttackersIn the past, it may have been acceptable to wait weeks or months for stable, regression-free security updates before addressing known vulnerabilities – that timeline no longer works. Attackers are moving faster. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) maintain a Known Exploited Vulnerabilities (KEV) catalog that lists flaws confirmed to be under active attack. According to Azul’s analysis of that catalog, 61% of vulnerabilities published in 2025 that were later exploited were added within 30 days of public disclosure. The true share is likely higher: the figure excludes the roughly one in four exploited vulnerabilities already listed on or before disclosure day, and CISA typically lists a flaw only after exploitation has begun. For most exploited vulnerabilities, the window between disclosure and attack is now measured in days, not weeks or months.Security-Only, Stability-First Updates Ready for Immediate DeploymentAzul is the only vendor to offer Security-only, Stability-first quarterly, monthly and out-of-cycle OpenJDK updates, which contain only security fixes, with no new features or unrelated bug fixes. These are built on the previous quarter’s stabilized full patch update, which Azul and the broader Java community have already tested extensively. With changes limited to security fixes only, the potential surface for regression is dramatically reduced. Since 2020 , more than 20% of OpenJDK quarterly updates included regressions that prevented their timely rollouts. During that same time, no security-only updates from Azul have had deployment-preventing regressions, and Azul customers were able to deploy straight to production in rapid manner. In addition, Azul delivers monthly, Stability-first Critical Security Patch Updates (CSPUs) layered on the existing security-only quarterly update, a capability no other Java vendor or OpenJDK distribution offers.Prior OpenJDK quarterly updates have included regressions as serious as breaking application access to all Google APIs, corrupting Tomcat HTTP content and breaking Hadoop deployments. Enterprises that relied on other OpenJDK distributions had to choose between customer impact and security. In contrast, Azul customers that deployed the Azul Core security-only update did not have to choose and were able to deploy immediately, safely and securely.Azul Core is a Java SE-compliant build of OpenJDK that is certified with the Technology Compatibility Kit (TCK). Azul Core is a drop-in replacement for Oracle Java and other Java SE-compliant distributions. Azul Core subscribers get monthly and quarterly security-only updates, quarterly full updates and out-of-cycle fixes as needed for every LTS release (8, 11, 17, 21, 25)Many enterprises also still run Java 6 and 7, an exposure in the age of AI-driven attacks. Azul is the only vendor that provides backported security fixes for these versions, extending the same monthly security cadence to organizations still running older Java in production.Azul Partners Can Help Customers Close the Exposure WindowAzul’s resellers and security services delivery partners are able to help their customers manage and remediate the quickly growing number of threats by taking the October update to security-conscious customers now. Resale and services for the Security-only, Stability-first updates are included in current Azul Core channel pricing.Closing the Gap Between Disclosure and Deployment“The record number of vulnerabilities in one OpenJDK update is a very real warning to all enterprises running their business-critical workloads on Java. AI has collapsed the time between disclosure and exploitation from weeks to days to hours, and attackers are chaining flaws that defenders used to rank as low priority,” said Scott Sellers, co-founder and CEO of Azul. “Enterprises shouldn’t have to choose between security and stability. Azul’s Security-only, Stability-first updates are able to be deployed immediately, so customers can close the exposure window before an attacker finds it first.”Enterprises running Oracle Java, other OpenJDK builds or free Azul Zulu builds in production, or that want to shorten the time it takes to remediate the 53 vulnerabilities disclosed in today’s quarterly update, can get patched with Azul today.About AzulAzul is the trusted leader in enterprise Java for today’s AI-first world. Its open source-based Java platform empowers organizations to optimize the entire Java lifecycle to accelerate performance, strengthen security, reduce licensing and cloud costs, and boost developer productivity. Azul powers mission-critical systems for 37% of the Fortune 100, 50% of the Forbes Top 10 World’s Most Valuable Brands, and the world’s top 10 financial trading companies. Learn more at azul.com and follow @azulsystems.# #