The Ultimate Guide to Endpoint Detection and Response
A curated Kiwi edition of TechDay news, analysis, interviews, reviews, job moves, and related resources for Endpoint Detection and Response (EDR).
What to know about Endpoint Detection and Response
Endpoint Detection and Response (EDR) is a critical component in modern cybersecurity strategies, focusing on the real-time detection, investigation, and mitigation of cyber threats targeting endpoints such as laptops, desktops, servers, and mobile devices. As cyber threats evolve in complexity and frequency, organizations increasingly rely on EDR solutions to gain deeper visibility and improve response times against sophisticated attacks.
The recent stories under this tag highlight advancements in EDR technologies, including integrations with AI and machine learning to enhance threat detection capabilities. They demonstrate the growing adoption of extended detection and response (XDR) platforms, which unify multiple security components to provide a broader scope of protection across networks, cloud workloads, and endpoints. Readers will find discussions on evolving challenges like ransomware surges, insider threats, and the rising importance of proactive security measures. Insights into the partnerships, product launches, and industry analyses offer valuable perspectives for IT professionals seeking to strengthen their organization’s cybersecurity posture through effective endpoint protection and response strategies.
Kiwi Endpoint Detection and Response News
Regional stories with direct local relevance
Collapsing grace period: When your adversaries never tire
Attackers are now moving fast enough that patching delays, standing privilege and inherited trust leave organisations exposed within minutes.
Lancom earns Microsoft Modern Work Enterprise status
Lancom Technology has secured Microsoft's Modern Work Enterprise status, recognising its capability to deliver Microsoft 365 at scale.
New Zealand issues mass alert over Lumma malware risk
New Zealand cyber agency emails 26,000 people in first mass alert over Lumma Stealer malware infecting Windows devices nationwide.
Westcon-Comstor expands NZ portfolio with Ivanti agreement
Westcon-Comstor has partnered with Ivanti to distribute its IT and security software across New Zealand, enhancing offerings for local channel partners.
Insider threats: Protecting what matters most from within
Insider threats cost organisations USD $17.4 million annually; Gallagher Security urges a people-first approach to protect assets from within.
Avast launches free AI scam protection in antivirus for NZ users
Avast adds free AI-driven Scam Guardian to its antivirus for New Zealand users, boosting protection against rising, sophisticated online scams globally.
Analyst Insights
Research and market analysis connected to Endpoint Detection and Response
CrowdStrike named leader in IDC MarketScape MDR study
CrowdStrike named Forrester XDR leader on AI strength
Atera offers fee-free Robin if AI misses support target
CrowdStrike leads Gartner cyberthreat intelligence quadrant
Pax8 & NinjaOne form global MSP referral partnership
Featured News
Expert Columns
While you were doomscrolling: Medusa ransomware hits 500+ victims (and your spaghetti sauce might be listening to you)
Collapsing grace period: When your adversaries never tire
Why 'strong passwords' can't save you from AI
Building security outcomes for small businesses: Why breaches persist despite available tools
Why AI-powered security needs network telemetry across the hybrid cloud
The agentic evolution: Why high-fidelity data is the lifeblood of the modern SOC
Saving the weekend: How SonicWall's SonicSentry SOC stopped a Saturday night cyberattack
Kernel in the crosshairs: The BlackSanta threat campaign targeting recruitment workflows
Why the next endpoint and SASE disruption will not come from a security vendor
Upgrade advantage: More value, less effort for partners, MSPs & MSSPs
Interviews
Interviews and video coverage from the network
Recent Endpoint Detection and Response News
Wipro launches CISO Command Centre with CrowdStrike
Enterprises facing faster AI-driven attacks could get a single view of cyber risk as Wipro and CrowdStrike tie security operations to board priorities.
Bitdefender launches AI visibility & control for firms
Security teams can now spot unsanctioned AI use across Windows estates, as Bitdefender adds risk ranking and policy controls to GravityZone.
Mandiant warns of AI agents fuelling new attack risks
Autonomous systems are now creating fresh avenues for code theft, remote execution and runaway cloud spending, Mandiant says.
CrowdStrike launches Falcon Guardian for AI agents
The new tools aim to curb prompt injection, data leakage and rogue AI activity as firms deploy agents with wider system access.
AI helped build Gryxa malware operation, report says
ReliaQuest says a single operator may have used a commercial AI coding agent to build malware, a console and update pipeline across 324 hosts.
Google Cloud urges stronger cyber basics amid AI attacks
As attackers use AI to speed up phishing and malware, companies are being told that multi-factor authentication and patching matter more than ever.
Clop-linked web shell hits Windchill in new exploit
Manufacturers face credential theft and engineering-data loss after a tailored Windchill web shell tied to Clop exploited CVE-2026-12569.
eScan rewards top channel partners with Thailand trip
The trip aims to keep resellers aligned as cyber security demand shifts and vendors rely on local partners for sales and support.
SonicWall launches endpoint security service for MSP market
Smaller businesses could gain cheaper ransomware protection as managed service providers get a new endpoint security option from SonicWall.
NeuShield adds exfiltration protection to Data Sentinel
By blocking stolen-logins abuse at file level, the new feature aims to curb both data theft and ransomware even after an account is compromised.
MedusaHVNC malware hijacks live browser sessions on Windows
Windows users face session theft risk as MedusaHVNC lets attackers operate in hidden browser desktops using existing cookies and log-ins.
Ransomware attacks speed up as hackers use AI tools
Manufacturers faced the heaviest ransomware pressure as AI tools and faster intrusions left defenders with less time to react.
Cato partners with CrowdStrike on security workflow
Security teams will gain a single workflow for incidents as the new tie-up links network and endpoint telemetry across investigations, hunting and visibility.
ThreatDown adds shadow AI & identity tracking tools
Security teams face higher breach costs as ThreatDown expands visibility over unsanctioned AI tools and machine accounts in one console.
Lampion malware campaign targets users in Portugal
Acronis said 94.6% of detections were in Portugal as the banking trojan used phishing lures and layered evasion to infect victims.
The Gentlemen tops ransomware rankings in Q2 review
Ransomware activity stayed elevated in Q2, with 2,252 named victims and The Gentlemen overtaking Qilin to top the rankings.
Bitdefender flags Windows bind links that blind EDR
Windows fleets could be left blind to malware once attackers gain admin rights, as Bitdefender says bind links can fool endpoint security tools.
Conifers opens Singapore data region for Asia-Pacific
Asia-Pacific security teams can now keep regulated data in Singapore as Conifers expands its CognitiveSOC platform across the region.
ESET warns of AI abuse & quishing surge in attacks
Malicious AI skills are helping criminals steal data and run malware, while QR-code phishing climbed 146% in the latest ESET report.
Gentlemen ransomware gang supplies EDR killers to affiliates
ESET says the gang's operator-backed toolkit could help affiliates bypass defences faster, widening the threat to businesses worldwide.
