Acalvio

No entries match these filters. Clear filters

1. announced Sep 29, 2026 · issue 090

   Acalvio ShadowPlex AI Agent launches in Gemini Enterprise Agent Marketplace, generating deception playbooks from natural language.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   └──▷ HOW TO FIND IT
   Use the ShadowPlex AI Agent in the Gemini Enterprise Agent Marketplace to turn a plain-language objective into a deployable deception playbook — no deception engineering expertise required.
   📍In the Gemini Enterprise Agent Marketplace, locate the ShadowPlex AI Agent and invoke it with a natural-language objective such as 'Detect lateral movement targeting privileged identities in our on-premises AD environment'. Review the generated deception strategy, deployment plan, and playbook, then deploy it through the ShadowPlex platform.
   • Adds the ShadowPlex AI Agent to the Gemini Enterprise Agent Marketplace, enabling integration with Google Cloud Gemini Enterprise.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Enables security teams to describe a security objective in natural language and automatically generate a ready-to-deploy deception playbook covering detection of lateral movementlateral movementMoving from an initially compromised system or identity to other resources in a network. Attackers often use stolen credentials or trusted connections to expand their access., credential abuse, AI-driven reconnaissance, privileged identity threats, and enterprise AI infrastructure.
   • Generates deception playbooks across on-premises infrastructure, cloud environments, identity systems, IT and OT networks, and enterprise AI infrastructure from a single platform.
   • Adds the ShadowPlex AI Agent to the Gemini Enterprise Agent Marketplace, enabling integration with Google Cloud Gemini Enterprise.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Enables security teams to describe a security objective in natural language and automatically generate a ready-to-deploy deception playbook covering detection of lateral movementlateral movementMoving from an initially compromised system or identity to other resources in a network. Attackers often use stolen credentials or trusted connections to expand their access., credential abuse, AI-driven reconnaissance, privileged identity threats, and enterprise AI infrastructure.

   1 more in Everything

2. announced Sep 14, 2026 · issue 096

   Acalvio ShadowPlex is now available in the CrowdStrike Store, adding deception-based detection integrated with the Falcon platform.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   • Adds Acalvio ShadowPlex as an application in the CrowdStrike Store, making it available to CrowdStrike Falcon platform customers.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Integrates ShadowPlex with the CrowdStrike Falcon platform to enable Adversary Traversal Analysis, identifying hosts compromised along an attacker's path to a decoy.
   • Adds deception-based active threat hunting (Hypothesis testing) within ShadowPlex to expose latent threats using CrowdStrike endpoint telemetry.
   • Adds an Adversary Indicators of Attack (IOAs) View that generates IOAs based on attack TTPsTTPsTactics, techniques and procedures, the goals, methods and specific behaviors used by an attacker. They describe how an attack works, rather than only the files or addresses it leaves behind. collected from high-interaction decoys and compromised enterprise hosts.

   4 details in Everything

3. announced Sep 12, 2026 · issue 092

   Acalvio launches agentless SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally.-based ITDRITDRIdentity Threat Detection and Response: a discipline focused on detecting and responding to attacks that abuse identity systems such as Active Directory or IAM platforms, giving cyber tools visibility into credential-based intrusions. solution combining identity attack surfaceattack surfaceThe exposed systems, interfaces and access points an attacker could try to use. It includes internet-facing services as well as identities, software and other reachable resources. mapping and Active Defense deception.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   • Adds ShadowPlex Identity Protection, which maps identity attack surface across Microsoft Active DirectoryActive DirectoryMicrosoft's directory service for Windows networks that centralises authentication and authorisation; cyber tools target or integrate with it because it controls identity and access across most enterprise environments., Azure Active Directory, and endpoint credential caches to surface misconfigurations, attack pathsattack pathsA possible sequence of steps an attacker could take to reach a valuable target. It connects weaknesses, permissions and reachable systems rather than treating each finding separately., cached credentials, and lateral movementlateral movementMoving from an initially compromised system or identity to other resources in a network. Attackers often use stolen credentials or trusted connections to expand their access. links.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Adds ShadowPlex Advanced Threat Defense, which automatically generates honey accounts blended into Active Directory and disperses honey tokens across the enterprise network to detect credential theft and lateral movement.
   • Integrates with EDREDREndpoint detection and response, monitoring computers for suspicious behavior and providing investigation and response controls, such as isolating a device., SIEMSIEMSecurity information and event management, collecting logs from many systems and correlating events to find suspicious activity. Analysts use it to investigate alerts and incidents., SOARSOARSecurity orchestration, automation and response, coordinating incident workflows across tools. Playbooks can gather evidence, assign work or carry out approved response actions., and NAC solutions to automate deception deployment, detect decoy credential use, and trigger real-time automated responses.
   • Deploys as an agentless SaaS solution available on Amazon Web Services, Microsoft Azure, and Google Cloud Platform marketplaces.

   4 details in Everything

4. announced Sep 12, 2026 · issue 092

   Acalvio launches ShadowPlex, a distributed deception platform with automated decoy deployment, Shadow Networks engagement, and Splunk ES integration.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   • Introduces ShadowPlex, a distributed deception platform supporting on-premises, private cloud, and public cloud deployment for breach and insider-threat detection.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Includes FluidDeception, a data-science-driven engine that automatically generates realistic, non-fingerprintable decoys, lures, baits, and breadcrumbs blended into the real network.
   • Provides Shadow Networks for adversary engagement to capture TTPsTTPsTactics, techniques and procedures, the goals, methods and specific behaviors used by an attacker. They describe how an attack works, rather than only the files or addresses it leaves behind. (Tools, Techniques, and Processes) and inform response.
   • Introduces DeceptionFarms to manage distributed deceptions across network topologies using ProjectionPoints, eliminating the need for trunk or span port access.
   • Ships pre-built integration with major SIEMSIEMSecurity information and event management, collecting logs from many systems and correlating events to find suspicious activity. Analysts use it to investigate alerts and incidents. systems for threat intelligence delivery, including Adaptive Response in Splunk Enterprise Security to dynamically deploy deceptions from Splunk.

   5 details in Everything