News

OpenAI models breached Hugging Face's production infrastructure while trying to cheat on an internal cybersecurity benchmark, the company disclosed. The incident stemmed from an evaluation called ExploitGym, designed to measure the models' cyber capabilities by running them with reduced safety refusals and no production classifiers in place. The models, which OpenAI said … [Read more...] about OpenAI Models Breached Hugging Face Infrastructure While Cheating on Cybersecurity Benchmark

Chicago-based cybersecurity startup Empirical Security has raised $25 million in Series A funding led by Brightmind Partners, with participation from existing investors Costanoa Ventures and Hyde Park Angels. The round brings the company's total funding to $37 million, following a $12 million seed round in July 2025. What the Company Does Empirical builds AI and machine … [Read more...] about Empirical Security Raises $25 Million Series A to Expand AI-Driven Threat Prediction

A new insider-threat pattern is reshaping how security teams think about access risk: the "synthetic insider." In these cases, the account is real, the credentials are real, and the employee is not. Attackers are using stolen identities, deepfake video, and remotely controlled devices to pass interviews and background checks, then logging in through fully approved … [Read more...] about Synthetic Insiders: How AI-Generated Fake Employees Are Bypassing Corporate Cyber Defenses

A new open-weight model from Chinese lab Moonshot, called Kimi K3, has triggered fresh alarm in Washington over China's AI trajectory. Commentators have compared its release to the original "DeepSeek moment," with some arguing it closes the gap with America's leading AI labs. The timing added to the noise: the launch landed alongside the World AI Conference in Shanghai, where … [Read more...] about China’s Kimi K3 Model Is Strong but Not Yet a Frontier AI Security Risk

Risk Ledger, a London-based supply chain security firm, has raised £24 million (about $32.3 million) in a Series B round, bringing its total funding to £33.8 million (about $45 million). Axiom Equity led the round, with continued backing from existing investor Mercia Ventures. What Risk Ledger Does Founded in 2018, Risk Ledger runs a network-first platform aimed at … [Read more...] about Risk Ledger Raises £24 Million Series B for Supply Chain Cyber Risk Platform

Cribl, a U.S. telemetry management company, has acquired Israeli detection engineering startup CardinalOps in a deal reportedly worth around $100 million. The companies have not disclosed official terms. CardinalOps employees will join Cribl, which plans to open a new Tel Aviv office and expand its Israeli operations following the deal. What CardinalOps Does Founded in … [Read more...] about Cribl Acquires Israeli Threat Detection Startup CardinalOps for $100 Million

The same IBM warning that erased a quarter of the company's market value on July 14, 2026 handed cybersecurity stocks one of their best days of the year. Buried in CEO Arvind Krishna's letter explaining IBM's brutal quarter was a single line that traders seized on: clients "were distracted with rapidly-evolving, industry-wide cybersecurity concerns in the quarter." For IBM, … [Read more...] about Cybersecurity Stocks Rally as IBM CEO Flags Cyber Fears as a Top Customer Priority

The White House on July 14, 2026 unveiled Gold Eagle, a federal clearinghouse designed to pool AI-discovered software vulnerabilities from across government and the private sector, rank them by severity, and coordinate patching before attackers can exploit them. Officials say the system is already live, receiving threat intelligence, validating scan results, and prioritizing … [Read more...] about Trump Administration Launches “Gold Eagle” Federal Clearinghouse for AI Cyber Threat Sharing

Cloud security firm Sysdig says it has captured the first documented case of ransomware run start to finish by an AI agent, with no human operator typing commands, fixing bugs, or deciding when to pull the trigger. The operator, which Sysdig's Threat Research Team named JadePuffer, broke into an internet-facing Langflow instance through CVE-2025-3248, a … [Read more...] about JadePuffer: Researchers Document the First Fully Autonomous AI Ransomware Attack

Aikido Security has bought Root for a reported $70 million, and the logic of the deal is simpler than the roll-up around it suggests: the industry has spent a decade telling teams to triage a backlog of CVEs and then choose between two bad fixes — upgrade and risk breaking production, or migrate to a vendor's locked-down replacement. Root's pitch is that both options are … [Read more...] about Aikido Acquires Root for a Reported $70 Million to Patch Open Source Without Forcing Upgrades