Black Hat USA 2025 – Summary of Vendor Announcements (Part 3) – Source: www.securityweek.com

Many companies are showcasing their cybersecurity products and services this week at the 2025 edition of the Black Hat conference in Las Vegas.

To help cut through the clutter, the SecurityWeek team is publishing a digest summarizing some of the announcements made by vendors at Black Hat USA 2025, including new products and services, updates to existing offerings, reports, and other initiatives. 

This is part three of the roundup. You can also check out the first and second part.

7AI announces product enhancements and partnership

Agentic security firm 7AI has announced several enhancements to its platform for autonomous security operations, including dynamic reasoning that enables agents to investigate completely novel alerts, enterprise insights to eliminate false positives, and autonomous remediation capabilities. 7AI also announced a partnership with DXC Technology to launch the DXC Agentic Security Operations Center (SOC).

Absolute Security unveils gen-AI assistant 

Cyber resilience firm Absolute Security announced improvements to its Absolute Resilience platform, including a gen-AI assistant that enables users to quickly obtain information on the security and compliance status of endpoint devices. The company also announced that its Resilience platform is now available in the CrowdStrike Marketplace.

Barracuda Networks released Ransomware Insights Report 2025

Barracuda Networks has released its Ransomware Insights Report 2025, which shows that 57% of the surveyed organizations were affected by ransomware, including 67% of those in healthcare and 65% in local government. The survey found that 32% of ransomware victims paid the attackers to recover or restore data, and 41% of those who paid a ransom failed to recover all their data. 

Bugcrowd introduces new capabilities

Bug bounty platform Bugcrowd unveiled two new capabilities named AI Connect and Asset View. AI Connect allows customers to integrate their internal AI stacks with real-time vulnerability data from the Bugcrowd Platform. Asset View turns assets into action by unifying asset discovery, management, scanning, and offensive testing into one panel.

Claroty collaboration with Google Security Operations

Claroty announced a new strategic collaboration with Google Security Operations that brings greater threat detection and response capabilities to organizations looking to bridge the gap between IT and OT. This integration will enhance security by feeding high-fidelity, context-rich alerts and vulnerability data from SaaS-powered Claroty xDome or on-premise Claroty Continuous Threat Detection (CTD) into Google’s cloud-native security operation platform. 

CrowdStrike’s new offerings and capabilities

CrowdStrike unveiled two new offerings as part of its AI Security Services Portfolio: AI Systems Security Assessment, which helps organizations understand and secure how AI is used across their environment, and AI for SecOps Readiness, which helps security teams safely and effectively adopt AI. CrowdStrike also announced the general availability of CrowdStrike Signal, a new class of AI-powered detection engines. The cybersecurity giant also announced integration with Open AI designed to add visibility and governance for AI agents. In addition, new threat intelligence that’s real-time, personalized, and embedded directly into SOC workflows. 

Cymulate exposure management platform 

The new Cymulate Exposure Management Platform enables security teams to bridge the gap between proactive and reactive measures with optimized threat prevention and detection. The new platform also increases collaboration between blue teams and vulnerability management with simplified ready-to-use templates, AI-guided assessments and customizable attack scenario workbenches. 

Delinea launches new engine for AI & machine identities

Human and machine identity security firm Delinea unveiled Iris AI, an AI engine designed to drive new platform capabilities such as real-time, evidence-based access decisions, intelligent auditing, and adaptive controls. 

MIND launches autonomous DLP platform

Data protection company MIND has launched an autonomous Data Loss Prevention (DLP) platform that delivers automated data discovery, AI-powered data classification, policy creation, automated remediation, and other capabilities. 

Netcraft report on emerging cyber threats in 2025

Netcraft has uncovered new trends for emerging threats in the first half of 2025. Among the key findings and trends: AI hallucinations and model manipulation are driving referral traffic to phishing sites; threat actors are poisoning search results with convincing lookalike sites and leveraging SEO tactics to evade traditional brand protection tools; quishing attacks use QR codes to drive victims to malicious phishing links; toll text scams are on the rise; impersonation-as-a-service tools enable rapid-fire brand spoofing at an unprecedented volume and efficiency.

Noma Security launches AI agent security solution

Noma Security, which recently raised $100 million, launched its AI Agent Security solution, a purpose-built platform for securing AI agents at scale. The solution scales Noma’s AI security platform capabilities to address risks introduced by agentic AI, providing security and development teams with the tooling required to discover, monitor, and govern autonomous agents deployed across enterprise environments.

Palo Alto Networks launches new module for AI and vibe coding risks

Palo Alto Networks has launched a new capability designed to help businesses secure applications built with AI and vibe coding. Building upon PANW’s Cortex Cloud launch in February, the new platform, named Cortex Cloud Application Security Posture Management (ASPM), is designed to proactively prevent security issues before apps are deployed. Cortex Cloud ASPM is currently in early access and is expected to become generally available in the second half of the year.

SCCMHunter update

SpecterOps researcher Garrett Foster announced a major update to his open source red team tool SCCMHunter, which is designed to help penetration testers attack Microsoft Configuration Manager (SCCM). 

Snyk updates AI Trust Platform

Snyk announced Secure At Inception, three major innovations to its AI Trust Platform: AI-Bill of Materials (AI-BOM), a governance tool for MCP-based development, tracking tools, data, and prompts across agent workflows; MCP Server, which embeds Snyk scanners directly into agents for secure code gen and execution without leaving the developer’s workflow; and Toxic Flow Analysis, a new detection framework from Invariant Labs to detect threats like prompt injection and tool poisoning.