From SecurityWeek · 40 stories
Beelzebub Raises $3.4 Million Seed Funding for AI-Native Cybersecurity Platform
Italian cybersecurity company Beelzebub secured €3 million (~$3.4 million) in seed funding, led by United Ventures, bringing its total raised to $3.8 million. The company develops an AI-native platform that uses deception technology and continuous adversary emulation to detect and contain cyber threats post-breach. This funding will support research team expansion, new office openings, and client acquisition, particularly targeting NIS2-regulated organizations.
Lookout Launches Mobile Security Exposure Center (MSEC) for Mobile Fleet Visibility
Lookout introduced its Mobile Security Exposure Center (MSEC), a new product designed to provide organizations with full visibility into the software components, dependencies, and vulnerabilities within mobile applications across their device fleets. MSEC addresses the challenge of securing mobile devices by creating proprietary Software Bills of Materials (SBOMs) from app binaries to identify embedded vulnerabilities, such as the WolfSSL flaw, and integrate with existing Continuous Threat Exposure Management (CTEM) systems for remediation.
Rockwell Patches Code Execution Flaws in Arena Simulation Software
Rockwell Automation has released a patch for four high-severity vulnerabilities in its Arena Simulation software that could allow arbitrary code execution. These memory corruption flaws, present in versions up to 17.00.00, require user interaction to exploit but are significant due to the software's broad use in critical sectors.
SentinelOne Benchmark Shows GPT-5.6 Sol Excels in Long-Horizon Malware Analysis
SentinelOne developed the first long-horizon reverse-engineering benchmark for frontier AI models, using the Fast16 malware as a test case. OpenAI's GPT-5.6 Sol was the only model to complete all eight stages of the benchmark, demonstrating superior "project-scale recovery" compared to other models. This benchmark highlights the current capabilities and limitations of AI in complex, multi-stage investigations, emphasizing the continued need for human oversight.
Assaf Keren Appointed Chief Information Security Officer at Meta
Assaf Keren has been appointed as the new Chief Information Security Officer (CISO) for Meta, succeeding Guy Rosen. Keren brings extensive experience from previous CISO roles at PayPal and Qualtrics, and will focus on building trust infrastructure for AI at Meta's global scale.
Palo Alto Networks to Acquire Embrace for Enhanced Observability Features
Palo Alto Networks intends to acquire Embrace to enhance its Observability platform with Real User Monitoring capabilities. The addition aims to provide a unified view of digital experiences, linking end-user interactions with backend performance metrics.
Security Flaws Found in Vibe-Coded Applications
Xint.io identified 434 exploitable security issues in vibe-coded applications, revealing significant vulnerabilities. This highlights the need for better security practices and oversight in AI-assisted coding efforts as reliance on such technologies increases.
StrongestLayer Secures $4.1 Million in Seed Funding Extension
StrongestLayer raised $4.1 million in a seed funding extension, increasing total seed funding to $9.3 million. This funding, led by Inovia Capital, will support the expansion of its AI-native email security platform against modern email threats.
Cisco Introduces Antares AI Models for Code Vulnerability Detection
Cisco Foundation AI has launched Antares, a family of small language models aimed at identifying vulnerabilities within codebases. Antares offers an open-weight approach, balancing cost and accuracy while addressing data sovereignty issues in security research.
Empirical Security Secures $25 Million Series A Funding for AI Cybersecurity Solutions
Cybersecurity startup Empirical has raised $25 million in Series A funding, totaling $37 million raised. The investment will accelerate the development of its AI-driven products that help organizations predict and identify cyber threats.
SecurityWeek Introduces Critical Impact Awards for Industrial Cybersecurity
SecurityWeek has launched the Critical Impact Awards to recognize achievements in industrial cybersecurity. This awards program aims to honor organizations and individuals based on merit rather than sponsorship, enhancing credibility in the cybersecurity field.
CISO Andreas Gaetje Discusses Career Path at Körber AG
Andreas Gaetje, CISO at Körber AG, reflects on his unconventional career journey from economics to cybersecurity. He emphasizes the significance of adapting to the evolving role of IT security, which has grown from compliance to a critical business threat.
Meta Awards $78,000 Bug Bounty for Critical Customer Support Data Vulnerability
Meta has awarded a $78,000 bounty to researcher Rony K Roy for discovering a vulnerability in its support data system that could have led to the exposure of sensitive customer information. The issue, initially thought minor, was found to allow unauthorized access to support cases and user communications, demonstrating significant flaws in Meta's security framework.
Clover Health Investments Reports Data Breach Affecting Customer Information
Clover Health Investments disclosed a data breach affecting customers' personal and health information due to a social engineering attack that compromised three employee accounts. The company initiated its response plan and engaged cybersecurity experts to handle the situation, though the full impact of the breach is still being investigated.
Cybersecurity Startup Neo Secures $100M for Enterprise AI Control Platform
Cybersecurity startup Neo has emerged from stealth with $100 million in funding for its platform designed to control and secure AI software within enterprises. The platform provides security teams with tools for monitoring AI agents and applications while offering real-time attribution to identify unauthorized actions.
New HIH Index Launches to Track Material Cyber Breaches
Richard Bird has launched the HIH Index to track material breaches, using two ledgers for data collection. The index aims to provide a resource for cybersecurity stakeholders and highlights discrepancies in reported losses over time, emphasizing an increase in companies affected rather than individual breach costs.
Cybersecurity Week in Review: Key Incidents and New Malware
A roundup of significant cybersecurity incidents highlights vulnerabilities from local actors, vendor breaches, and emerging malware. Notably, the new CrashStealer macOS malware poses threats to Apple devices, while various cyberattacks disrupt operations and lead to financial consequences for businesses.
Interview Discusses Governance Failures and MindStone Agent in Cybersecurity
Brian Schleifer interviews Clint Bodungen about governance challenges in cybersecurity and introduces the MindStone Agent, a new open-source AI project. This discussion highlights the ongoing evolution of cybersecurity and the critical role of human factors over technology in vulnerabilities.
Beacon Security Secures $13M Seed Funding for Threat Detection Platform
Beacon Security has raised $13 million in seed funding led by Notable Capital to develop its cybersecurity data platform. The platform enhances threat detection by integrating various data sources and leveraging AI, positioning Beacon to address new security needs in enterprise environments.
Pentagon Suspends CMMC Phase 2 Pending Review to Address Contractor Challenges
The Pentagon has suspended Phase 2 of the Cybersecurity Maturity Model Certification (CMMC) to review its implementation and address industry concerns. This suspension pauses third-party assessments but maintains Phase 1 self-assessments and existing regulations. A CMMC Reform Task Force will lead a 60-day evaluation to recommend future measures.
Risk Ledger Secures $32 Million in Series B Funding for Supply Chain Security
Risk Ledger has raised approximately $32.3 million in a Series B funding round, led by Axiom Equity. This funding will expand its network of organizations tackling supply chain cyber risks and facilitate entry into the US market.
China Suspends Major Cybersecurity Firms from Military Procurement
China has suspended or banned over a dozen leading cybersecurity firms from military procurement due to contract bidding misconduct. This marks a significant enforcement action in the country's state procurement system, highlighting concerns about compliance within the industry.
Trend Micro, Tanium, ESET, and Tenable Patch Critical Vulnerabilities
Cybersecurity firms Trend Micro, ESET, Tanium, and Tenable have released patches for severe vulnerabilities in their products. These updates are crucial as they address potential exploits that could allow attackers to execute remote code and escalate privileges.
Windows Bind Link Attacks Can Evade Endpoint Detection Tools
Researchers at Bitdefender reveal that Windows bind links can be exploited to hide malware from EDR tools. This manipulation allows attackers to redirect legitimate paths to malicious files, evading detection by security systems reliant on path validation.
Siemens, Schneider, Rockwell Address Critical ICS Vulnerabilities in July Patch Tuesday
Siemens, Schneider Electric, and Rockwell Automation released advisories for vulnerabilities in their industrial control system (ICS) products. Significant vulnerabilities, including critical flaws with CVSS scores up to 10, were addressed, mitigating risks of remote exploitation and operational disruption.
Synopsys Denies Data Breach Claims Linked to Bosch Hack
Synopsys has found no evidence of a data breach after a cybercriminal group, D1R, claimed to have hacked its systems and accessed customer data, including from Bosch. The firm maintains that its systems are secure and that the hackers’ claims are unfounded, potentially minimizing the urgency of the security threat.
Valarian Secures $50 Million in Series A Funding for AI Governance Platform
Valarian raised $50 million in Series A funding to expand its AI governance platform, ACRA. The investment will enhance its cloud-agnostic infrastructure designed to isolate and manage workloads securely.
June 2026 Sees 37 Cybersecurity M&A Deals Announced
In June 2026, a total of 37 cybersecurity merger and acquisition deals were announced. Notable transactions include 1Password acquiring Apono, Accenture's purchase of Dragos, runZero, and NetRise, and Cisco's intent to acquire WideField Security.
QIZ Security Secures $17 Million for Cryptographic Governance Platform
QIZ Security has raised $17 million in seed funding to enhance its post-quantum cryptography management platform. The platform aims to enable organizations to govern encryption across various environments and prepare for quantum computing risks.
Palo Alto Networks Addresses 13 Security Vulnerabilities in Recent Patch
Palo Alto Networks has patched 13 vulnerabilities across its products, including a severe buffer overflow in PAN-OS that could allow DoS attacks and remote code execution. Organizations are advised to apply these updates to mitigate risks, particularly given the vulnerabilities' potential for exploitation despite currently low attack activity.
8Layers Secures $2.9 Million for Identity Security Platform Expansion
8Layers, a Spanish security startup, has closed a $1.1 million pre-seed extension, reaching a total of $2.9 million in funding. This investment will enhance its digital identity protection platform, which integrates multiple security features and aims to expand its presence across Europe.
CISA Uses Anthropic's Mythos AI to Audit Federal Software for Vulnerabilities
CISA is deploying Anthropic’s Mythos AI model to scan federal government software for vulnerabilities. The initiative aims to identify and rectify potential security flaws that could be exploited before they are discovered by adversaries.
Tarah Wheeler Shares Insights on Her Career in Cybersecurity Leadership
Tarah Wheeler, CISO at TPO Group, discusses her unexpected journey into cybersecurity and her social science perspective on the field. Her insights highlight the importance of understanding human behavior in shaping effective security policies and leadership roles in cybersecurity.
Canadian Hacker Jailed for Cyberattack; KDDI Data Breach Impacts 14 Million
Aubrey Cottle, a Canadian hacker linked to Anonymous, was sentenced to 18 months in prison for a 2021 cyberattack on the Texas GOP. Meanwhile, KDDI announced a data breach affecting over 14 million users, exposing email addresses and passwords.
Microsoft Introduces Controls to Block Unauthorized AI Bots in Teams Meetings
Microsoft has launched a new Teams admin policy to control external bots joining meetings. By requiring organizer confirmation for bots, the company aims to enhance security and privacy during sensitive discussions.
Levi Strauss & Co. Reports Corporate Data Exfiltration After Social Engineering Attack
Levi Strauss & Co. disclosed that hackers accessed and exfiltrated corporate information from three employee computers through a social engineering attack. The company stated that the incident did not disrupt business operations and found no evidence of consumer data exposure, but the specific corporate data taken was not disclosed. The company believes the incident will not materially impact its business.
Analog Devices Discloses Data Breach, Files Exfiltrated
Semiconductor company Analog Devices reported a data breach detected on June 23, where an unauthorized party accessed systems and exfiltrated certain files. The company stated that operations were not disrupted and the incident is not expected to materially impact its business, though it is also assessing public reports of a separate cybersecurity matter from July 26.
AI Governance Lags Adoption, Creating Risks for Organizations
Many organizations are delaying AI governance until regulations are finalized, despite 46% reporting that governance issues cause AI underperformance. This delay creates risks due to rapid AI adoption, fragmented regulatory environments, and evolving threat landscapes.
Cyber Operations Emerge as Fourth Domain of Military Conflict Alongside Land, Air, and Sea
Cyberspace has become a critical fourth domain of military conflict, influencing geopolitical disagreements alongside traditional land, air, and sea forces. This integration means cyber activities now frequently precede kinetic warfare, highlighting the evolving nature of international conflict and the strategic importance of cyber capabilities.
SIM Swap Attack Highlights Vulnerabilities in Identity Verification
A recent near account takeover incident underscores the inadequacy of current identity verification methods. It reveals the need for organizations to continuously evaluate identity throughout the customer journey rather than relying on one-time authentication.