Connect with us

Technology

AI Helped Steal Thousands of Credentials in Under Six Hours. Former Google Security Leader Bryan Vuong Is Fighting Back

Published

on

As FBI figures show nearly $21 billion in U.S. internet-crime losses, Silicon Valley cybersecurity startup Cyfendo is using AI to help smaller businesses find software vulnerabilities, investigate real threats and prepare tested fixes for developer approval.

MOUNTAIN VIEW, Calif., Oct. 15, 2026 /PRNewswire/ — The attacker did not need a team, just an AI coding agent, instructions and a set of tools. In less than six hours, a suspected cybercriminal used an AI-enabled framework to plan, build and run a mass credential-harvesting campaign from compromised cloud infrastructure. Thousands of third-party login credentials were compromised, according to Google Threat Intelligence Group in its September 8, 2026 report.

AI helped steal thousands of credentials in under six hours. Cyfendo’s Bryan Vuong helps small businesses fight back.

The campaign shows how much an attacker can organize in a few hours. At a small business, the next security warning may land on one developer’s desk, alongside customer support requests and software updates. Bryan Vuong wants to make that investigation less difficult.

Bryan Vuong, the founder and CEO of Silicon Valley cybersecurity company Cyfendo, previously led engineering work at Google and Facebook. His company uses AI-assisted source-code analysis to help developers examine possible vulnerabilities, investigate exploitability where supported, and assess proposed repairs before any change is approved. The goal is to give smaller teams more of the investigative capability usually found inside a large technology company.

“What worries me is the gap between increasingly powerful attack capabilities and the resources ordinary businesses have to defend themselves,” Bryan Vuong said. “I founded Cyfendo to help them protect what they’ve worked so hard to build.”

The Cost of Cybercrime, and the Businesses at Risk

The FBI’s 2025 Internet Crime Report recorded 1,008,597 complaints and about $20.88 billion in reported losses across internet crimes, including fraud. Meanwhile, the U.S. Small Business Administration counted approximately 36.2 million small businesses in 2025, more than 4.3 million of them in California.

Small businesses use software to take orders, process payments, book appointments and store customer records. When a scan flags a problem, the person maintaining the application must determine whether an attacker could exploit it, what information is at risk and how to make a repair without breaking a feature customers rely on. That work competes with support requests and the next release.

AI Can Build an Application. Who Checks Its Security?

AI coding tools can help a restaurant launch online ordering, a contractor set up a customer portal or a founder build an application without hiring a conventional development team. Consider a small distributor whose customers download invoices from a portal. One customer changes a single number in the invoice URL and opens another customer’s billing record. The site looks normal; the login works; an ordinary test may show nothing wrong. The error is in the access rule that should have kept the invoices separate.

Other flaws can be just as hard to spot. A database query may return the right information to a legitimate user while mishandling malicious input. A newly connected service may have broader access than it needs. None of these mistakes has to interrupt a normal transaction to put the business at risk.

A finished application may also have passed through several tools. A developer could start in Lovable, make changes with Cursor, connect Supabase for authentication and storage, track versions in GitHub and deploy the project elsewhere. Each service has its own security controls, but no single check should be assumed to cover the entire codebase after those changes. Someone still has to examine the software that customers actually use.

Cyfendo adds a code-level review alongside those platform protections. Developers can connect GitHub, GitLab or Bitbucket repositories, upload project files or work from the command line. They can check the application as it exists now, including features and integrations added after launch.

Finding a Vulnerability Is Only the First Step

A scanner may flag a suspicious line without telling the developer how an attacker could use it. Someone still has to reproduce the problem, judge its severity, correct the code and check that the application continues to work.

Cyfendo links those steps where its tools support them. The platform traces untrusted data through source code to sensitive operations, runs isolated checks to investigate exploitability, and prepares a code patch for review. It then re-tests the finding and relevant application behavior. Developers see the evidence and decide whether to accept the proposed change; Cyfendo does not merge patches directly into production software.

“Every business, big or small, deserves world-class security,” Bryan Vuong said. “Protecting what you’ve built should not depend on whether you can afford a team of experts.”

This is useful when the person responsible for an AI-built application is also the person answering support requests and shipping new features. That developer may know the business extremely well without having the time or training to investigate every security finding from scratch.

According to Cyfendo’s own scan data, the company finds an average of four critical-severity issues per codebase. Approximately seven in ten findings are rated high or critical. Those results come from projects scanned by Cyfendo, not a representative survey of business applications. They help explain the company’s emphasis on investigating findings and preparing fixes rather than handing developers another list of alerts.

Cyfendo has separately published results on standardized OWASP detection benchmarks. In its September 2026 evaluations, it reported 94.06% recall and 96.38% precision on the Java Benchmark v1.2 (2,740 test cases), and 90.04% recall and 93.78% precision on the Python Benchmark v0.1 (1,230 cases). Recall measures how many known vulnerable cases were detected; precision measures how many flagged cases were truly vulnerable. These are company-reported detection results, not an OWASP endorsement or an independent validation of automated repairs. Cyfendo has published its benchmark methodology for review.

Cyfendo’s code-security platform is available now. Its free plan covers up to 10,000 protected lines of code and five scans a month, with detailed findings and limited patch evaluation. Paid self-service subscriptions begin at $99 per month and include automated generation of review-ready patches and higher scanning allowances. The company’s separate application penetration-testing service remains in private beta for select businesses and is not part of those subscriptions.

Bryan Vuong’s Career, From AI Research to Application Security

Vuong’s background includes engineering leadership, machine learning and academic research. From 2020 to 2026, he served as Senior Engineering Manager, AI and Security, at Google, working in areas involving privacy, safety and security. Earlier, at Facebook, now part of Meta, he worked as a machine-learning research scientist and engineering manager.

He earned a Ph.D. in Computer Sciences from the University of Wisconsin–Madison, where he studied databases, information extraction and data integration, following a Bachelor of Engineering with First Class Honours from Nanyang Technological University in Singapore. Publishing as Ba-Quy Vuong, he contributed research on unstructured information and user feedback in information-extraction systems. He is also named as co-inventor on three granted U.S. patents in search and information processing, assigned to Walmart-related entities.

In 2024, Vuong co-founded InnoSearch AI, an online shopping service for blind and low-vision users. The service helped people navigate online shopping experiences that had not always been designed for them. With Cyfendo, he is addressing another gap in access: smaller organizations can build substantial software, but often cannot employ the specialists needed to assess its security.

Automated analysis cannot replace sound access controls, timely updates or a developer’s judgment. It can give a small team evidence and a proposed fix to review when a security problem would otherwise demand specialist investigation.

Google’s investigation showed what an attacker could organize in a few hours. Cyfendo is focusing on the work a developer faces after finding a potential weakness: determining whether it can be exploited, reviewing a repair and checking the change. More small businesses can now build their own applications with AI. They also need an effective way to check the security of what they put online.

About Cyfendo

Cyfendo Inc. is a Silicon Valley-based application-security company founded by Bryan Vuong. Its AI-powered platform combines source-code analysis, vulnerability investigation, exploitability checks where supported, proposed patches and re-testing. Developers can connect repositories or upload projects, inspect findings and approve or reject proposed code changes. The company offers free and paid code-security subscriptions; separately scoped application penetration testing is in private beta for select businesses.

Build with AI. Verify with Cyfendo.

About Bryan Vuong

Bryan Vuong, also known as Ba-Quy Vuong, is the founder and CEO of Cyfendo. His work includes engineering and machine-learning leadership at Google and Facebook, a Ph.D. in Computer Sciences from the University of Wisconsin–Madison, academic research and co-inventorship on three granted U.S. patents assigned to Walmart-related entities. He previously co-founded InnoSearch AI, an accessible e-commerce platform for blind and low-vision users.

Founder biography | Company website

Media

Wendy Nguyen

(650) 262-6576

contact@cyfendo.com 

View original content to download multimedia:https://www.prnewswire.com/news-releases/ai-helped-steal-thousands-of-credentials-in-under-six-hours-former-google-security-leader-bryan-vuong-is-fighting-back-302910676.html

SOURCE Cyfendo

Continue Reading

Technology

EVIDENT Expands Its Pramana Digital Pathology Portfolio to Support Small and Medium-Sized Labs

Published

on

By

The new Pramana™ POD benchtop WSI scanner delivers autonomous imaging to help laboratories create pathologist-ready whole slide images with minimal operator intervention.

NEEDHAM, Mass., Oct. 16, 2026 /PRNewswire/ — Today, Evident announced the Pramana™ POD whole slide imaging (WSI) scanner, a new benchtop system designed to help laboratories produce trusted images. Built for small and medium-sized laboratories and specialty applications within larger institutions, the scanner helps make digital pathology adoption more accessible.

As pathology laboratories expand digital workflows amid increasing case volumes and operational demands, they need scanning systems that produce consistent, high-quality images across specimen types while integrating into existing laboratory workflows. Evident designed the Pramana POD scanner to address those needs, extending proven Pramana autonomous WSI technology to smaller laboratories.

“Pramana WSI technology has received tremendous acceptance from pathology labs across academic medical centers and network labs across the United States,” said Prasanth Perugupalli, Vice President of Digital Pathology, Evident. “By incorporating quality assurance into the whole slide imaging process, Pramana technology can help labs of varying sizes reduce the need for post-scan QA and the associated costs and delays.”

The Pramana POD scanner automates imaging with an advanced tissue finder, extensive label detection, and automated focal plane and scan-profile selection. Built-in image-quality assessment helps deliver pathologist-ready whole slide images and identify scans that may require further review. Volumetric imaging captures multiple focal planes to support the selection of sharp focal information across the scanned area, with true 40X imaging at 25 slides per hour under defined conditions.

The Pramana series of autonomous WSI scanners is well-suited for most brightfield imaging applications, including histopathology, core biopsies, hematology, cytology, and microbiology.

“Scientific advances move quickly, but laboratory infrastructure changes slowly,” Perugupalli added. “With the Pramana POD scanner, small and medium-sized labs can build as their needs evolve.”

To learn more about the Pramana POD benchtop WSI scanner, visit evidentscientific.com/products/slide-scanners/pramana-pod.

About EVIDENT
For over 100 years as Olympus, we set the industry standard for optical precision in microscopy, helping the world see what was once out of view. Today, as Evident, we continue to help scientists, physicians, and engineers illuminate the unseen with advanced imaging solutions that combine renowned optics with cutting-edge digital innovation.

Our life science portfolio supports research, clinical diagnostics, and education, offering a comprehensive range of imaging methods from essential brightfield and darkfield microscopy to advanced fluorescence, 4D analysis, and digital pathology. In industrial microscopy, we deliver precision and flexibility through laser scanning, digital, and semiconductor microscopes designed for tasks ranging from routine inspection to intricate quality control and manufacturing analysis.

Whether advancing new therapies, ensuring product integrity, or exploring the unknown, Evident is defining a new era of discovery with easy-to-use tools that help unlock hidden answers and empower exciting new breakthroughs.

Evident is headquartered in Tokyo and supported by R&D and manufacturing centers in Japan, the United States, Germany, and China, with operations and dedicated sales and service centers around the world. For more information, visit EvidentScientific.com.

For Research Use Only. Not for use in diagnostic procedures. Future clinical availability is subject to applicable regulatory authorization, and regulatory status and availability may vary by country. Performance varies by specimen type and workflow.
Pramana is a trademark of Evident Corporation or its subsidiaries.

View original content to download multimedia:https://www.prnewswire.com/news-releases/evident-expands-its-pramana-digital-pathology-portfolio-to-support-small-and-medium-sized-labs-302911714.html

SOURCE Evident

Continue Reading

Technology

PhotonPay Secures UK EMI Licence, Advancing Its Global Payment Operating System

Published

on

By

HONG KONG, Oct. 17, 2026 /PRNewswire/ — PhotonPay, a next-generation payment operating system, today announced that it has secured an Electronic Money Institution (EMI) licence from the UK Financial Conduct Authority (FCA).

The licence enables PhotonPay to issue electronic money and provide regulated payment services in the UK within the scope of its authorisation. It further strengthens PhotonPay’s local capabilities in the market and supports the company in delivering broader payment and treasury solutions for businesses operating globally.

The UK is one of the world’s leading financial and commercial hubs, and an important gateway for businesses operating across Europe and international markets. As companies expand into more countries and regions, their financial needs are evolving beyond individual cross-border transactions toward more integrated management of accounts, collections, payouts, foreign exchange, cards and treasury operations.

For PhotonPay, entering a market means more than making products and services available. It requires building a local financial foundation that meets regulatory requirements and can support businesses over the long term. The EMI licence further strengthens PhotonPay’s position in the UK and provides an important foundation for deeper connectivity with local banks, payment networks and the broader financial ecosystem.

JP, Global Head of Compliance at PhotonPay, said:

“Securing our UK EMI licence marks an important milestone in the continued expansion of PhotonPay’s global regulatory footprint. Building a global payment operating system requires strong local regulatory foundations. This authorisation strengthens our ability to build for the long term in the UK, while supporting our continued expansion across more markets, currencies and payment networks. Ultimately, it enables us to deliver a more complete and efficient payment and treasury experience for businesses operating globally.”

As businesses expand internationally, the financial infrastructure behind their operations remains highly fragmented. Different markets operate across distinct account structures, payment networks, currencies and regulatory frameworks, often requiring businesses to manage multiple financial institutions, payment providers and systems at the same time.

PhotonPay is building its next-generation payment operating system around this complexity. Through a unified technology platform, the company connects local financial capabilities across markets, enabling businesses to manage global accounts, collections, payouts, foreign exchange, cards and embedded finance more centrally while reducing the operational complexity created by multiple markets, currencies and systems.

Real commerce is the foundation of this operating system. By continuously expanding its regulatory coverage, banking relationships, payment networks and underlying technology infrastructure, PhotonPay aims to ensure that financial infrastructure can scale alongside a business as it enters new markets and grows internationally.

Since its founding, PhotonPay has continued to expand its global regulatory and local market capabilities through entities across major financial markets. Today, PhotonPay has secured nearly 30 payment licences and related regulatory authorisations worldwide, supporting capabilities across global accounts, collections, payouts, foreign exchange, cards and embedded finance.

The UK EMI licence represents another step in the continued development of PhotonPay’s global regulatory network. Looking ahead, PhotonPay will continue to deepen its local regulatory and financial capabilities in key markets, connect more markets, currencies and payment networks, and advance the development of its next-generation global payment operating system.

About PhotonPay

PhotonPay is a next-generation payment operating system designed for businesses operating globally. Across global accounts, collections, payouts, foreign exchange, cards and embedded finance, PhotonPay connects banks, payment networks and local financial infrastructure to help businesses manage global money movement more efficiently and expand into new markets with greater operational simplicity.

View original content to download multimedia:https://www.prnewswire.com/apac/news-releases/photonpay-secures-uk-emi-licence-advancing-its-global-payment-operating-system-302911540.html

SOURCE PhotonPay

Continue Reading

Technology

Canada to advance global nature conservation and climate action at upcoming United Nations conferences

Published

on

By

OTTAWA, ON, Oct. 16, 2026 /CNW/ — In a more uncertain and increasingly unstable world, Canada is stepping up to build a safer and more resilient future. Addressing climate change and biodiversity loss requires ambitious action at home and around the world. By advancing progress on both, Canada will protect nature, build resilient communities, and create lasting prosperity for future generations. International cooperation is key to achieving these goals.

That is why the Honourable Julie Dabrusin, Minister of the Environment, Climate Change and Nature, will lead Canada’s efforts as Head of Delegation at the 17th meeting of the Conference of the Parties to the Convention on Biological Diversity (COP17) and the 31st meeting of the Conference of the Parties to the United Nations Framework Convention on Climate Change (COP31).

At COP17, Minister Dabrusin and the Honourable Nathalie Provost, Secretary of State (Nature), will work with international partners to accelerate implementation of the Kunming–Montréal Global Biodiversity Framework. From October 19 to 30, 2026, in Yerevan, Armenia, Canada will champion the critical role of Indigenous peoples in conservation and advocate for practical solutions to mobilize global resources for biodiversity finance. Canada will showcase its leadership through two Canadian-led official side events focused on innovative nature finance and the essential role of Indigenous leadership in advancing conservation efforts at home and around the world. The delegation will also take part in strategic bilateral meetings, high-level roundtables, and civil society events to strengthen cooperation, advance solutions, and drive action to halt and reverse biodiversity loss.

From November 9 to 20, 2026, in Antalya, Türkiye, Canada will participate in the 31st Conference of the Parties to the United Nations Framework Convention on Climate Change (COP31). Building on multilateral engagements, including the 10th Ministerial on Climate Action, Canada will continue working with international partners, Indigenous representatives, civil society, youth, and other stakeholders to strengthen the resilience of vulnerable communities; reduce methane emissions; accelerate electrification; and mobilize finance and investments from public and private sources. For the fifth consecutive year, Canada will host a national pavilion at COP31, showcasing Canadian climate leadership and innovation. The Canada Pavilion will serve as a hub for connection and collaboration.

Canada’s international leadership is backed by action at home. To accelerate electrification, Canada is building major clean energy projects across the country, including with the largest clean energy investment in North American history in Churchill Falls. Through A Force of Nature: Canada’s Strategy to Protect Nature and $3.8 billion in investments and funding, Canada is advancing its commitment to conserve 30% of lands and waters by 2030 through strong partnerships and innovative approaches to conservation. Canada recently reinforced this commitment by joining the 30×30 for Nature and People Ministerial Declaration at the 81st session of the United Nations General Assembly. Prime Minister, Mark Carney, recently announced a historic investment of $1.2 billion to better protect Canada’s oceans and the life they sustain. This will increase monitoring, strengthen ocean science and ecosystem protections, and improve marine incident prevention and preparedness. These priorities will be a key focus at both upcoming conferences.

Canada’s delegations to COP17 and COP31 will bring together the diverse perspectives from across Canadian society, including Indigenous representatives, civil society, the private sector, youth, and provincial and territorial government representatives. Working with international partners, these delegations help advance practical solutions to protect nature, strengthen resilience, and support sustainable economic prosperity.

Quotes

“Climate change and biodiversity loss are global challenges that no country can solve alone. At COP17 and COP31, Canada will work with partners from around the world to strengthen implementation of the Kunming–Montréal Global Biodiversity Framework and the Paris Agreement and collective efforts to address nature protection and climate change. Through international cooperation, Indigenous leadership, innovative solutions, and a collective commitment to conservation and climate action, we will build a sustainable future for people and nature alike.”
– The Honourable Julie Dabrusin, Minister of the Environment, Climate Change and Nature

“Nature loss is a global challenge that requires countries to work together and turn shared commitments into action. At COP17, Canada will share its experiences in advancing nature finance, including innovative approaches to valuing natural capital and mobilizing private investment for conservation. By exchanging ideas, lessons learned, and practical solutions with international partners, we can accelerate progress toward our global biodiversity goals and recognize nature as a foundation of long-term economic prosperity and resilience.”
– The Honourable Nathalie Provost, Secretary of State (Nature)

Quick facts

As the second largest country in the world, Canada has a vast amount of natural capital, including 24% of the world’s boreal forest, 37% of lakes, 25% of wetlands, and approximately 80,000 species. We have both a responsibility to steward these resources as well as a competitive advantage because of these assets.Canada hosted the 15th meeting of the Conference of the Parties to the United Nations Convention on Biological Diversity (COP15) in Montréal in 2022, which resulted in the adoption of the Kunming–Montréal Global Biodiversity Framework: an ambitious global plan to halt and reverse biodiversity loss by 2030.Canada supports the Armenian COP17 presidency and its approach to strengthen implementation of the Kunming–Montréal Global Biodiversity Framework toward meeting the Framework’s goals and targets.In September 2026, Canada and China co-chaired the Kunming Dialogue in Kunming, China. The Dialogue was a multilateral working-level meeting to discuss progress and challenges in the implementation of the Framework ahead of COP17.The Canada Pavilion at the United Nations Conference of the Parties (COP) is a key space to show Canadian climate leadership and innovation.Reducing methane emissions remains one of the fastest and most cost-effective ways to limit the rise of near-term global temperatures. Canada serves as co-convenor of the Global Methane Pledge, which counts 159 participating countries and the European Commission, with participants agreeing to take voluntary actions toward a collective goal of reducing global methane emissions at least 30% by 2030 (from 2020 levels).In April 2026, Canada announced a new goal of delivering $13 billion in international climate finance over the next five years.

Associated links

A Force of Nature: Canada’s Strategy to Protect NaturePrime Minister Carney Announces Historic Investment to Protect Canada’s OceansCanada Pavilion at the Conference of the Parties (COP)

Environment and Climate Change Canada’s X page
Environment and Climate Change Canada’s Facebook page
Environment and Natural Resources in Canada’s Facebook page
Environment and Climate Change Canada’s LinkedIn page
Environment and Climate Change Canada’s Instagram page

SOURCE Environment and Climate Change Canada

Continue Reading

Trending