Microsoft's share of brand phishing climbs to 33% in Check Point's Q3 count
Microsoft accounted for 33% of the brand-impersonation phishing attempts Check Point Research tracked in Q3 2026, up from 23% in Q2. Its examples include fake Antigravity and Apple pages that get visitors to run terminal commands themselves.
Reality
- Evidence50
- Adoption
- Not scored
- Hype gap+15
- Incentives55
- Confidence55
Small RIAs below Fidelity's $100 million minimum have until June 30 to find a new custodian
Fidelity is giving advisory firms with less than $100 million on its custody platform until June 30 to move their accounts elsewhere. For firms that use Fidelity as their only custodian, the move means months of repapering client accounts, American Banker reported.
Reality
- Evidence45
- Adoption
- Not scored
- Hype gap+10
- Incentives65
- Confidence50
AppViewX's agent identity product adds a kill switch that reaches shadow AI agents
AppViewX's Agent Identity Security now finds browser-based and short-lived shadow AI agents and can terminate any agent and its sessions at runtime. It handles agents as identities to scope and revoke, and every claim about how well that works comes from AppViewX and one customer, ZoomInfo.
Reality
- Evidence30
- Adoption20
- Hype gap+45
- Incentives85
- Confidence35
Socure's round prices a 63% grower at roughly 14 times ARR, and the agentic investigation platform it bought sells an 80% cut in cost per case, which is a promise to deflate the budget it is sold into.
Perspective Coverage
4 publishers
- Builder
- Builder 21%
- Operator
- Operator 36%
- Investor
- Investor 43%
Reality
- Evidence58
- Adoption62
- Hype gap+25
- Incentives70
- Confidence60
Tropic tells finance a 20% software increase is the new baseline for midmarket buyers
The procurement platform's Q1 benchmark puts midmarket and enterprise software growth near 20% against 3.5% at small business, and it attributes the gap to multi-year contracts and integrations that make pushback harder.
Publishers:tropicapp.io
Reality
- Evidence25
- Adoption30
- Hype gap+40
- Incentives85
- Confidence55
A Windows loader for sale on a crime forum takes its orders over Tox peer-to-peer messaging
AvisLoader statically links the reference Tox client, so its operator keeps the same identity after moving to a new server. The ClickFix page and Cloudflare tunnel that deliver it are still ordinary takedown targets.
Reality
- Evidence66
- Adoption20
- Hype gap+18
- Incentives62
- Confidence57
NovaCookies rents real-time Microsoft 365 session theft for $320 a month
Island says the adversary-in-the-middle service runs on at least 755 domains against hundreds of organizations. The session it steals arrives after an authentication the identity provider records as entirely normal.
Reality
- Evidence45
- Adoption58
- Hype gap+18
- Incentives65
- Confidence55
Docusign cut per-document AI cost 50-fold by routing most work to models it trained itself
A Microsoft case study credits Docusign's swap to small task-specific models with 90% lower cost and eight times the throughput. Docusign's own accounting of the whole pipeline claims 50 times cheaper per document.
Reality
- Evidence42
- Adoption62
- Hype gap+24
- Incentives80
- Confidence55
Salesforce runs Agentforce a generation behind the models its keynote guests debated
Nvidia's Jensen Huang told frontier labs to run as fast as they can. On the Dreamforce floor, the Salesforce customers and partners CNBC quoted said last year's models already cover the work they sell, and one of them would welcome a pause.
Reality
- Evidence58
- Adoption45
- Hype gap+18
- Incentives72
- Confidence55
buildOne report1 publisher Aclif's deny-before-load gate trusts whatever the provider author declared
The MIT-licensed framework gives agents one command grammar for Salesforce, ServiceNow, DocuSign and Agentforce. The safety metadata a host checks before running a command comes from provider authors the project leaves unnamed.
Reality
- Evidence46
- Adoption11
- Hype gap+14
- Incentives66
- Confidence44
N0va captures refresh tokens from sign-ins the identity provider itself approved
ANY.RUN says the kit lures staff with Teams, DocuSign and Dropbox pages, walks them through a genuine device code sign-in, and then takes the access and refresh tokens to register a device of its own.
Reality
- Evidence25
- Adoption20
- Hype gap+45
- Incentives85
- Confidence60
a16z draws the build-vs-buy line at the edge of the incumbent's own record
Salesforce, Docusign, Atlassian and Klaviyo are all marketing agents that act on their own records. Andreessen Horowitz's case for building anything on top now rests on whether your job needs data those records never held.
Reality
- Evidence28
- Adoption20
- Hype gap+22
- Incentives76
- Confidence55
Quishing moves the login off the managed laptop and onto an unfiltered personal phone
Fast Company's roundup of four working email scams includes three that never show a link worth hovering over, which leaves both the awareness module and the mobile device policy answering a question users no longer face.
Reality
- Evidence38
- Adoption
- Not scored
- Hype gap+25
- Incentives25
- Confidence50
Jackal IV's 58 arrests cover under a third of the suspects INTERPOL identified
A week of takedowns removed people and froze assets across five separate actions, while the kit that manufactures the stolen Microsoft 365 sessions those crews depend on still sells on Telegram for $320 a month.
Reality
- Evidence28
- Adoption52
- Hype gap+30
- Incentives58
- Confidence36
buildOne report1 publisher NovaCookies turns an MFA approval into a live Microsoft 365 session for $320
Island's write-up describes an adversary-in-the-middle proxy that hands passwords, push approvals and SMS codes to real Microsoft servers, then keeps the cookie Microsoft issues. Origin binding is the only listed control that breaks it.
Reality
- Evidence48
- Adoption40
- Hype gap+18
- Incentives66
- Confidence47
Socure buys the agents that build the fraud case file before the analyst opens it
The $156 million round set a $5.2 billion valuation, and the part that reaches a working analyst is RiskOS_Agents, which gathers the documents, runs the screening and drafts the summary a human used to write.
Reality
- Evidence33
- Adoption44
- Hype gap+36
- Incentives78
- Confidence52
buildConfirmed2 publishers Gemini Enterprise for Legal ships as skills, connectors, partner agents and a control plane. One of the systems it plugs into belongs to Thomson Reuters.
Reality
- Evidence52
- Adoption18
- Hype gap+32
- Incentives76
- Confidence58
Island says the kit relays Microsoft 365 sign-ins behind genuine Docusign envelopes and legitimate Microsoft or Google redirects, leaving sender reputation nothing to grade.
Reality
- Evidence60
- Adoption58
- Hype gap+18
- Incentives74
- Confidence62