ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

Search: “funding”

258 stories

Searchkeywordsmart Sortlatesthotimportancerelevance
DomainAllCyberAIWindow24h3d7d30dAllIn the wildImportant onlyShow duplicates
CategoryAllRansomware 1275Phishing & fraud 1076Policy & legal 933Vulnerability 874Malware 740Industry 671Threat actor 610Exploit / PoC 579Data breach 572AI tools & infra 85Advisory 66AI industry 65AI safety & security 55Research 49
SeverityAllcritical 2757high 1847medium 1141low 1711info 261

What must happen for AI’s trillion-dollar gamble to pay off

Hyperscalers need 2.7x productivity gains by 2030 to justify nearly $1.1 trillion in AI data center spending, or risk bankruptcy and capital misallocation.

Wharton finance professor Jessica Wachter estimates hyperscaler AI expenditure will reach nearly $1.1 trillion through 2027 and that a 2.7x productivity increase is needed to break even by 2030. AI revenues of roughly $150-200 billion this year fall far short of about $750 billion in annual spending, with total investment from Alphabet, Microsoft, Amazon, Meta, and Oracle potentially exceeding $5 trillion over four years. Alphabet reported its first free cash flow deficit (about $5.9 billion) since its 2004 IPO due to AI infrastructure costs. Researchers warn that failed demand could make the buildout the largest capital misallocation in history, with depreciating GPU chips risking stranded assets.

MIT Technology Review · AI · 12h agoAI industry

The Rise of the Forward Deployed Engineer — and How To Do the Job Right

Palantir veteran Vinoo Ganesh traces the forward deployed engineer role and shares practices for building effective FDE teams.

Kepler CEO and former Palantir forward deployed engineer Vinoo Ganesh argues that labs, startups, and PE firms hire FDEs without a shared definition of the role. He recounts Palantir's Project Frontline rotation, which trained about 250 software engineers as FDEs, many now leading forward deployed teams at OpenAI, Anthropic, xAI, and Anduril. A 2013 failure of the Phoenix transaction store at a bank, where real-world data gaps caused roughly 2.3 million keyspaces and an out-of-memory crash, illustrates why FDEs must own the gap between design and production reality. At Kepler he places the FDE function inside product rather than sales.

Latent Space · 3d agoAI industry 4 sources1

The Fraud Ecosystem: A Transition From Known Marketplaces to a Fragmented Environment

Rapid7 analyzes how fraud marketplaces are fragmenting into specialized shops after larger marketplaces were dismantled, aided by new MITRE F3 framework

Rapid7 reports a shift from large known fraud marketplaces to a fragmented environment of smaller specialized storefronts such as Xleet, Blackpass, Infodig, and Styx, operating across dark web channels, Telegram, and P2P options. These Fraud-as-a-Service shops sell stolen accounts, PII, synthetic identity generation, infrastructure, and money laundering support, supporting schemes like business email compromise. MITRE's Fraud Fighting Framework (F3), introduced in early 2026, aims to help security teams prioritize monitoring of fraud TTPs, particularly account takeover techniques. Fraud damages are anticipated to approach hundreds of billions of USD.

Rapid7 Blog · 4d agoPhishing & fraud

Heterogeneous Cross-Chain Transaction Tracing for Solana Bridges via Candidate-Set Selective Decision

SolTracer traces cross-chain transactions onto Solana bridges, improving open-world association F1 by 20.16% over the strongest baseline for illicit-fund tracing.

The paper formalizes four Solana-bound cross-chain transaction modes and proposes SolTracer, which maps heterogeneous execution semantics into a unified event space and uses candidate-set selective decision-making with abstention when valid targets are absent. In the challenging open-world setting with a 50% TA ratio, SolTracer improves F1 by 20.16% over the strongest baseline. An empirical study of real-world transfers examines count-value divergence across bridge mechanisms, cross-asset shifts, and decoupling between on-chain settlement and explorer visibility.

arXiv cs.CR · 5d agoResearch

Sequoia doubles down on Cymphony as AI agents create new enterprise security risks

Cymphony emerges with $30M from Sequoia and SMBC to give security teams unified visibility into AI agent and non-human identities.

Cymphony, a New York- and Tel Aviv-based startup, raised a $25 million Series A co-led by Sequoia and SMBC Fin Atlas Beyond Fund, valuing it above $100 million. Its platform builds a "workforce graph" unifying identity, data, and activity signals for employees, AI agents, and other non-human identities. The company says it found roughly 85,000 files exposed to AI tools at one US public company and reached seven-figure ARR in its first year of sales with customers including KKR and Syngenta. Sequoia previously led its undisclosed seed round, betting on Israeli Talpiot program alumni founders.

TechCrunch · Security · 6d agoIndustry

Georgia man charged for robbing NBA, NFL players through stolen Apple account details

Georgia man Kwamaine Jerell Ford charged with phishing NBA and NFL players' Apple accounts, making over 2,000 fraudulent transactions, and sex trafficking counts.

Kwamaine Jerell Ford, 34, was arrested and pleaded not guilty to dozens of counts including wire fraud, computer fraud, aggravated identity theft, access device fraud, and sex trafficking. He posed as an adult film actress offering explicit videos, then as Apple customer support to harvest usernames, passwords, and MFA codes from professional athletes, gaining access to their credit and debit cards and making more than 2,000 transactions including fund transfers and DoorDash orders. Prosecutors say he ran the scheme while on probation for a similar 2019 phishing offense in which he spent nearly $325,000 of stolen funds, and also coerced a woman into sex with players, filmed encounters without consent, and hacked one athlete's home security cameras. He was held without bail.

The Record · 7d agoPolicy & legal in the wild

Apple’s Ternus era begins as Nvidia bets on the whole AI stack

Apple's John Ternus becomes CEO as Tim Cook steps down; Nvidia expands across the AI stack while a16z launches a $1.1B Machine Age fund.

Tim Cook stepped down as Apple CEO, handing the company to former hardware chief John Ternus, with Cook staying as Executive Chairman focused on policy relationships. TechCrunch's Equity podcast also unpacks Nvidia's moves to own the entire AI stack, including its Hugging Face acquisition, a MediaTek investment, and deeper compute deals. Other items include robotaxi competition (Tesla Cybercab, Waymo expansion, Zoox paid rides), Andreessen Horowitz's new $1.1 billion 'Machine Age' fund, and the $285 million GoPro acquisition.

TechCrunch · AI · 11d agoAI industry

Risky Bulletin: Dutch intel services to get extensive new powers

Netherlands proposed a bill granting AIVD and MIVD expanded warrantless tapping, faster hacking powers, and forced data disclosure, citing Russia, China, and Iran threats.

The Dutch government introduced a bill greatly expanding surveillance powers of intelligence agencies AIVD and MIVD, allowing up to one year of tapping without pre-approval and simplified hacking operations against 'foreign adversaries'. Agencies could compel Dutch companies or citizens to provide data under threat of charges, share data with the private sector, and oversight bodies would merge into a new CTT board. The bill follows similar overhauls in Ireland, Germany, and France after Russia's invasion of Ukraine. The newsletter also reports Moonwell hacked for $8.7M, a Cosmos EVM bug exploited for ~$3M, ShinyHunters listing McKesson with claimed hundreds of millions of records, and a pro-Kremlin DDoS claim against Norway's government network.

Risky Business News · 15d agoPolicy & legal

100-plus companies call for ‘global surge’ in AI

OpenAI, Anthropic, Google, Microsoft, AWS and 100+ organizations sign open letter urging a 'global surge' in AI-powered cyber defenses.

More than 100 companies including OpenAI, Anthropic, Google, Microsoft, AWS, Capital One, Mastercard, CrowdStrike, Palo Alto Networks and Proofpoint signed an open letter published Thursday calling for accelerated cybersecurity defenses as AI capabilities advance. The letter argues a shrinking 'defenders' window' exists to fix accumulated weaknesses such as excessive permissions, misconfigurations and unpatched legacy systems before AI-enabled attacks grow more widespread. It asks governments to coordinate cross-border defense and fund protection of critical infrastructure, and asks frontier AI labs to provide model access, funding and support. It references a June US executive order creating the Gold Eagle AI threat-sharing clearinghouse.

CyberScoop · 18d agoIndustry

Call for Applications: Information Controls Research Program 2026

The Open Technology Fund is accepting applications for its 2026 Information Controls Research Program, announced via Citizen Lab.

The Citizen Lab reposted an announcement that the Open Technology Fund is accepting applications for the 2026 Information Controls Research Program. The program funds research on internet censorship and information controls. The announcement is a call for applications rather than a technical security finding.

Citizen Lab · 29d agoIndustry

The Next Model Won’t Fix This: Three AppSec Imperatives From Black Hat USA 2026

Checkmarx-funded study discussed around Black Hat USA 2026 found frontier models produce working code 83-95% of the time but only 24-36% of solutions meet the study's requirements.

A study initiated and funded by Checkmarx, highlighted in the vendor's Black Hat USA 2026 takeaways, evaluated frontier models on real-world software repository tasks. The models produced working code 83-95% of the time, but only 24-36% of their solutions passed the study's criteria, underscoring a gap between functional and acceptable output. Checkmarx uses the findings to argue that AppSec teams need process-level controls now rather than waiting for improved models.

Checkmarx · 29d agoAI safety & security

Risky Bulletin: The EU publishes its upcoming cybersecurity standards

ETSI releases 17 draft cybersecurity standards vendors must meet when the EU Cyber Resilience Act takes effect in December 2027.

The European Telecommunications Standards Institute published 17 interim draft standards covering operating systems, routers, firewalls, VPNs, SIEMs, browsers, password managers, smart home devices, toys and wearables. They mandate basic security features such as post-sale updates, shipped SBOMs, modern cryptography and secure-by-default settings; public comments run until November, with final versions expected in December, one year before CRA compliance begins in December 2027. The newsletter also reports Irregular taking responsibility for AI test-environment escapes involving Anthropic and Meta frontier models, a breach at France's tax agency exposing 678,000+ citizens' data claimed by hacker ZeroBytes, and Kazakhstan eGov data covering 15 million citizens listed for sale on an underground forum. Additional briefs cover a $3.2 million Harmony Protocol theft crashing the ONE token 40%, Columbus Police still restoring systems two years after ransomware, DDoS attacks on Threema's provider, and Ukraine's GUR claiming a cyberattack on Wildberries.

Risky Business News · 29d agoPolicy & legal1

New policy ideas for the Intelligence Age

OpenAI is funding 14 independent projects exploring AI policy ideas on economic opportunity and societal resilience.

OpenAI announced funding for 14 independent projects that explore new AI policy ideas. The funded work focuses on expanding economic opportunity and strengthening societal resilience. This is a private funding initiative rather than new regulation.

OpenAI News · 29d agoAI industry

Risky Bulletin: White House lets private companies carry out offensive cyber ops

A White House memo directs DHS to create a program letting vetted private companies conduct US-government-directed offensive cyber operations against cybercrime.

A presidential memo tasks the DHS National Coordination Center with building a program, under DOJ and DHS oversight, through which private-sector companies can conduct offensive cyber operations against large-scale cybercrime organizations. Requirements include secure facilities, vetted personnel, a $1 million escrow for damages, and written approvals co-signed by DHS and DOJ executive directors. The program must launch within 60 days, around October 11, expanding a March executive order targeting scam compounds, ransomware, and other large-scale cybercrime.

Risky Business News · Aug 14, 2026Policy & legal

Exein Secures $270M at $1.7B Valuation for Physical AI Security

IoT security firm Exein raised $270 million at a $1.7 billion valuation to expand runtime protection and physical AI security agents.

Italy-based IoT security startup Exein announced a $270 million oversubscribed round led by Headline, bringing total funding above $600 million and valuing the company at $1.7 billion. Exein builds embedded and kernel-level runtime protection for IoT devices and is developing a proprietary foundation model for physical AI security powering autonomous defense agents. The funding will accelerate expansion, particularly into the US market.

SecurityWeek · 6h agoIndustry

Have it both ways: stay discoverable in search while disallowing AI training

Cloudflare launches Disallow AI Training setting letting sites block AI training via robots.txt while staying indexed in search; Apple, Google, and Microsoft honor it.

Cloudflare announced a 'Disallow AI Training' setting that publishes a no-training preference in robots.txt so sites can block AI training (including by mixed-use crawlers) without losing search indexing. Apple, Google, and Microsoft meet Cloudflare's new 'Accountable' designation, which requires training/summary opt-out mechanisms, URL-level training visibility, and assurance that opt-outs don't affect search rankings. Cloudflare cites that under 1% of its sites block search bots while 17% block AI training, and its Block settings now apply to mixed-use crawlers as well. Granular controls over how much content appears in AI summaries are planned for early next year.

Cloudflare Blog · 9h agoTools

Early Anthropic hire, former METR COO have found a way to rein in rogue AI agents

Startup AIUC raises $40M Series A to provide SOC 2-style third-party audits testing AI agents for jailbreaks, hallucinations, and data leaks.

Artificial Intelligence Underwriting Company (AIUC), founded by early Anthropic employee Rune Kvist and former METR COO Rajiv Dattani, announced a $40 million Series A led by Ribbit Capital, bringing total funding to $55 million. Its AIUC-1 standard and testing service runs AI agents through roughly 5,000 tests covering jailbreaks, hallucinations, and data leaks, producing a roughly 100-page audit report verified by humans. Customers include Cursor, Lovable, Harvey, and ElevenLabs.

TechCrunch · AI · 9h agoAI safety & security

New Italian unicorn Exein rides the physical AI wave

Italian IoT-security startup Exein raised $270 million at a $1.7 billion valuation to build a security layer for physical AI and edge devices.

Rome-based Exein raised a $270 million round led by Headline at a $1.7 billion valuation, becoming Italy's new unicorn, with plans for M&A and US/APAC expansion. The company claims over 2 billion connected devices secured across aerospace, industrial automation, automotive, energy, healthcare, and semiconductors using its Photon kernel-level runtime protection. Exein is training a foundational model for physical AI security on machine telemetry, targeted for Q1 2027, and reports 400% year-on-year growth. The EU Cyber Resilience Act, whose reporting obligations began last week, is expected to further boost demand.

TechCrunch · Security · 10h agoIndustry

Members of ‘Black Axe’ cybercriminal group extradited from South Africa

Five Black Axe members extradited from South Africa face US wire fraud and money laundering charges over romance scams defrauding more than 100 victims.

Perry Osagiede, Franklyn Edosa Osagiede, Osariemen Eric Clement, Collins Owhofasa Otughwor and Musa Mudashiru, leaders of Black Axe's Cape Town branch, were extradited September 11 and appear before a federal judge in Trenton, New Jersey under a 2021 indictment. They ran romance scams from 2011 to 2021 that stole thousands of dollars from over 100 people, threatening to leak sensitive photos and laundering proceeds through South African companies; some funds also traced to business email compromise. Wire fraud and money laundering charges each carry up to 20 years. Treasury estimates $12.7 billion stolen from Americans since 2023 via overseas romance and investment scams.

The Recordupdated · 10h agofirst · 1d agoPolicy & legal 3 sources

Superhuman acquires YC-backed notetaker Fathom as productivity platforms push for agentic work

Superhuman acquires AI notetaker Fathom to add meeting context and agentic workflows to its 40-million-user productivity platform.

Superhuman is acquiring Y Combinator-backed AI notetaker Fathom, which raised over $30 million and was valued at $94 million in 2024. Fathom reports 400,000+ monthly active users and over 1 million people have recorded meetings with it. The deal adds notetaking to Superhuman's suite (email, docs, calendar, database, AI agent builder) to enable proactive AI agents driven by meeting context, competing with Granola, Read AI, and Wispr.

TechCrunch · AI · 1d agoAI industry

Who gets to define the rules for AI?

Cohere CEO Aidan Gomez attacks big-lab antitrust exemption proposals as cartel behavior that lets incumbents write AI safety rules.

Cohere CEO Aidan Gomez argues that proposals from large AI labs—particularly Anthropic's roadmap requesting antitrust exemptions for safety coordination—amount to a cartel letting incumbents define rules for everyone else. He draws parallels to the 1975 SEC NRSRO credit-rating designations and the EU's 1985 Motor Vehicle Block Exemption, where safety justifications produced incumbent-protecting market structures. Gomez supports independent review of highly capable AI systems but disputes who writes the standards, who conducts review, and who participates. He also warns AI cyber offense is getting cheaper faster than defenses are improving.

Hacker News · AI · 1d agoAI policyHN 41↑ · 29 comments

Kiteworks Acquires Bonfy.AI to Fill the AI Gap in Data Governance

Kiteworks acquired AI data-security firm Bonfy.AI, reportedly for tens of millions of dollars, to add inline AI-era data governance.

Kiteworks announced the acquisition of Bonfy.AI, an AI-native content-security platform that classifies sensitive data in real time as it moves across email, file sharing, SaaS apps, and AI agents. The deal, estimated by CTech at tens of millions of dollars, will extend Kiteworks' Data Control Plane with inline runtime policy enforcement for both human and AI-agent workflows. This is Kiteworks' eighth acquisition in five years; Bonfy was founded in early 2024, raised a $9.5 million seed round, and emerged from stealth in June 2025.

SecurityWeek · 4d agoIndustry 2 sources

Top 10 Best Enterprise Browsers in 2026

2026 enterprise browser guide ranks Island first and notes Mammoth Cyber's wind-down plus corrections to standard vendor shortlists.

An editorial guide assesses ten enterprise browser options, ranking category creator Island first for last-mile DLP and BYOD controls, followed by Palo Alto's Talon browser as a Prisma Access/SASE surface and Google Chrome Enterprise Premium for DLP on already-deployed browsers. It corrects common lists, noting SlashNext is browser-adjacent phishing and BEC defense rather than a managed browser, and that Mammoth Cyber has wound down independent operations. Microsoft Edge for Business is positioned as effectively free policy depth for Microsoft 365 estates, with Menlo Security offering an isolation-plus-browser blend.

Cyber Security News · 4d agoIndustry1

Package Manager Trends

Sixteen-week roundup finds package managers converging on release-age cooldowns, install-script blocking, malware scans, and recurring path-traversal and credential-leak fixes.

The author aggregates supply-chain security trends from sixteen weeks of This Week in Package Management, built from about 80 RSS feeds. Release-age cooldown gates shipped in Deno 2.8, Bundler, npm, Yarn, mise, Hex, Mamba, and Cargo, with Dependabot making a three-day cooldown default in August. npm 12 and Bun 1.4 now block lifecycle install scripts by default, and Composer 2.10 and uv added install/publish-time malware checks, while npm's registry began scanning at publish time. Path traversal on archive extraction was fixed in 14 of 16 weeks across tools including uv, pnpm, Docker, and Composer, and credential-misdirection bugs affected Cargo, ORAS, Composer, and Renovate.

Lobsters · security · 5d agoResearch1

Top 10 Best Ransomware Protection Solutions in 2026

A 2026 buyer's guide ranks ten ransomware protection tools by kill-chain role as extortion shifts from encryption to data theft.

The roundup organizes defenses across the ransomware kill chain: prevention-grade EPP/EDR platforms, containment layers, rollback specialists, and immutable recovery. Recommended products include CrowdStrike, Microsoft Defender, Sophos, SentinelOne, Bitdefender, Trend Micro, Halcyon, Huntress, and Malwarebytes. It stresses that many crews now extort on stolen data without encrypting, making exfiltration detection and response speed as important as rollback.

Cyber Security News · 5d agoIndustry1

HelmGuard Raises $7.3 Million for Agentic GRC and Security

Agentic GRC and security startup HelmGuard raised a $7.3 million seed round co-led by Infinity Ventures and Frontline.

HelmGuard, a UK-based startup founded in 2024 by former Palantir executive John Daley (CEO) and Jack Miller (CTO), announced a $7.3 million seed round co-led by Infinity Ventures and Frontline, with participation from FinTech Collective, Stage 2 Capital, and Entrepreneurs First. The company builds agentic governance, risk and compliance (GRC) software that collects risk signals directly from integrated source systems and uses AI agents to automate risk management, assurance, and control gap assessments. It claims the platform cuts assessment cycles to hours by unifying fragmented compliance and security data.

SecurityWeek · 6d agoIndustry