ZeroHour

Search: “sequoia”

163 stories

Sequoia doubles down on Cymphony as AI agents create new enterprise security risks

Cymphony emerges with $30M from Sequoia and SMBC to give security teams unified visibility into AI agent and non-human identities.

Cymphony, a New York- and Tel Aviv-based startup, raised a $25 million Series A co-led by Sequoia and SMBC Fin Atlas Beyond Fund, valuing it above $100 million. Its platform builds a "workforce graph" unifying identity, data, and activity signals for employees, AI agents, and other non-human identities. The company says it found roughly 85,000 files exposed to AI tools at one US public company and reached seven-figure ARR in its first year of sales with customers including KKR and Syngenta. Sequoia previously led its undisclosed seed round, betting on Israeli Talpiot program alumni founders.

TechCrunch · Security · 6d agoIndustry

AEO startup Profound hits unicorn valuation, raises $180M Series D 7 months after last round

AEO startup Profound raised a $180M Series D at a $1.8B valuation led by Sequoia and Kleiner Perkins.

Profound, which builds marketing software to help brands appear in AI search results, raised a $180 million Series D at a $1.8 billion valuation, seven months after its $96 million Series C. Sequoia and Kleiner Perkins led the round, with Lightspeed Venture Partners, Khosla Ventures, and South Park Commons participating. The company reports 3x revenue growth in six months and over 1,000 enterprise customers including Comcast, The Estée Lauder Companies, and Walmart. It operates in the generative engine optimization (GEO) and answer engine optimization (AEO) space.

TechCrunch · AI · 7h agoAI industry

CISA Warns of Apple macOS Vulnerability Exploited in Attack (CVE-2026-65400)

CISA added actively exploited macOS flaw CVE-2026-65400 to its KEV catalog, affecting Tahoe, Sequoia, and Sonoma, with a patch deadline of August 21, 2026.

CISA acknowledged active exploitation of CVE-2026-65400, an authentication flaw affecting macOS Tahoe, Sequoia, and Sonoma, and added it to the Known Exploited Vulnerabilities Catalog. The vulnerability was discovered and reported to Apple by Alfredo Pesoli via Bynario Atlas. The remediation deadline is August 21, 2026.

Qualys ThreatPROTECT · 27d agoExploit / PoC in the wildCVE-2026-65400

Apple Rolls Out Massive Security Update Fixing 273 Vulnerabilities Across Its Devices

Apple's coordinated rollout patches 273 unique vulnerabilities across iOS 27, macOS Golden Gate 27, watchOS and Safari, including remote code execution flaws.

Apple shipped one of its largest coordinated security updates on September 14, 2026, fixing 273 unique CVEs across iOS 27, iPadOS 27, macOS Golden Gate 27, watchOS 27, tvOS 27, visionOS 27, Safari 27 and Xcode 27. Highlights include CVE-2026-65414, a Bluetooth out-of-bounds write enabling remote code execution, and CVE-2026-84607, an AVEVideoEncoder race condition granting kernel privileges to sandboxed apps. macOS Golden Gate 27 covers the broadest set with 210 CVEs, and Apple states none of the flaws were exploited in the wild.

AIR raises $50M to help companies vet the skills and add-ons AI agents use

AI security startup AIR exits stealth with $50M across two seed rounds to continuously vet skills, plugins, and MCP servers used by enterprise AI agents.

AIR, founded by Unit 8200 veterans Yair Saban and Niv Hoffman, raised $10 million led by Sequoia and $40 million led by Greenoaks to secure the emerging AI agent software supply chain. Its platform discovers agents in enterprise environments, intercepts their actions, and continuously vets skills, add-ons, and MCP servers against a maintained whitelist, filtering out about 27% of found add-ons. The company claims over 20 customers, roughly a quarter large enterprises, with strong demand in financial services and pharma, and competes with Noma Security, Zenity, Astrix Security, and Operant AI.

TechCrunch · Security · 14d agoAI industry

Apple macOS Screen Sharing Flaw Exploited on Internet

Actively exploited CVE-2026-65400 in macOS Screen Sharing grants pre-auth root access; attackers deploy Monero miners on exposed systems.

NCSC-NL reported active exploitation of CVE-2026-65400 (CVSS 9.8), an authentication flaw in macOS Screen Sharing patched on August 6, 2026, with root access gained and a Monero miner planted on internet-exposed systems using port 5900. Related Screen Sharing bugs CVE-2026-43779, CVE-2026-43777, and CVE-2026-43760 were fixed in macOS Tahoe 26.6, and researcher @osxreverser noted a pre-auth flaw fixed alongside them affecting roughly 40,000 exposed hosts. Calif said an AI agent produced working exploits for both pre-auth bugs in four hours, underscoring the shrinking gap between patch release and weaponization.

The Hacker News · 27d agoExploit / PoC in the wildCVE-2026-65400CVE-2026-43779CVE-2026-43777+1 CVEs