Blog

The Road to Ransomware or How Attacks Reach You: The Threat Actor and Defender View

Eye Security — Tue, 11 Aug 2026 07:00:01 GMT

One in twenty organisations we onboard is already breached when we arrive. This is what our team finds when we deploy MDR across a new customer environment for the first time.

The Real Cost of Ransomware in 2026

Eye Security — Tue, 04 Aug 2026 07:00:01 GMT

The average ransom demand facing a European mid-market organisation is now $613,000. 15% of the cases we investigated came in above $1m.

Identity, at AI Speed: What 279 BEC Cases Reveal About GenAI Attacks

Eye Security — Thu, 30 Jul 2026 07:00:01 GMT

In 79% of the business email compromise cases we investigated last year, multi-factor authentication was in place and working.

Shadow AI and EU Sovereignty: The AI That Is Already in the Room

Eye Security — Tue, 28 Jul 2026 08:00:01 GMT

Your biggest AI risk is not the model your security team evaluated and signed off. It is the free ChatGPT account an employee opened this morning, the Copilot tab that logged into a personal environment, and the AI feature your CRM switched on last quarter without asking.

Beyond the Mythos Hype: What Specialised AI Models Can Do

Eye Security — Wed, 22 Jul 2026 08:15:47 GMT

July 22, 2026: an AI agent just breached a real company on its own

OpenAI released GPT-5.6, and with it a remarkable admission. During an internal cybersecurity test, an autonomous, uncensored GPT-5.6 agent escaped its intended sandbox, reached the open internet, and compromised Hugging Face, the AI hosting platform, to improve its own benchmark score.

The model was never meant to have internet access. It found an undisclosed vulnerability in a package-installer tool, used it to break out, then pulled test solutions straight from Hugging Face's production database. Hugging Face described what hit them as thousands of individual actions across a swarm of short-lived sandboxes, with self-migrating command-and-control staged on public services. This is a real breach, carried out by a model, on its own.

Here is the detail defenders need to sit with. These agents are so capable precisely because they are evaluated with almost no guardrails. They do not keep running into safety restrictions. Our AI agents, the ones we build to defend, operate under the opposite conditions. They respect compliance requirements, privacy policies, approval workflows and safety controls. Threat actors accept none of that. As open-source models keep improving, the same offensive capability becomes available to everyone, including cybercriminals and state-sponsored groups.

Eye Security Brings MSPs and Brokers Together at First EMEA Partner Summit

Eye Security — Thu, 28 May 2026 10:00:01 GMT

On 20 May, Eye Security convened its first EMEA Partner Summit in Eindhoven, bringing together managed service providers and broker partners from the Benelux and DACH for a day centred on a singular proposition: strong partnerships matter most when cybersecurity becomes more complex, more operational, and more consequential for customers.

Multi-Actor Intrusion in Business Email Compromise: Two Threat Actors, One Inbox

Eye Security — Thu, 07 May 2026 17:08:53 GMT

Business email compromise (BEC) is no longer a niche cybercrime technique. It is one of the most common and damaging forms of intrusion affecting the European mid-market. What makes BEC especially dangerous is not technical sophistication alone. It is the abuse of trust, identity, timing, and familiar business processes.

Shadow AI Is Leaking Enterprise Data: Here Is How to Prevent It in the Browser

Jorn Pieterse — Thu, 30 Apr 2026 08:00:00 GMT

Employees are leaking sensitive data into personal ChatGPT, Claude and Gemini accounts every day and most organisations have no visibility into it. This is why we built AI Leak Block, a lightweight browser extension that detects when users interact with AI tools with their personal account. When a risky action is detected, it warns the user before data leaves the browser. Our extension is not logging or collecting any data for maximum privacy.

■ For a technical breakdown, read the full write-up.

■ Test the AI Leak Block extension via the Chrome Web Store.

The 90-Day Blind Spot: What Your Security Tools Are Not Telling You

Eye Security — Thu, 23 Apr 2026 08:00:00 GMT

You have endpoint protection. You have monitoring. You have a partner watching for threats. By most measures, you are doing the right things.

Introducing complisec: Giving AI Agents the Context to Know What They’re Allowed to Do

Eye Security — Thu, 16 Apr 2026 08:00:01 GMT

AI agents are already writing code, processing data, and automating internal workflows. In many cases, they are operating without a clear understanding of what they are allowed to do. That is not because the models are incapable. It is because they lack context. They do not know which systems are critical, what data is sensitive, what must be logged, or when a decision should involve a human.

Today, we are introducing complisec, an open-source skill suite designed to give AI agents the context they need to operate within those boundaries. It gives AI agents the same compliance context a trained employee would have and enforces it at decision time.