Ionut Arghire

Focused on securing autonomous AI on endpoints, the startup will invest in product development.

The lightweight updates are meant to deliver security protections between security updates.

Anthropic, AWS, Google, Microsoft, and OpenAI fund the Linux Foundation’s long-term security initiatives focused on open source software.

The company says some of its internal business applications were accessed after an employee fell victim to a phishing attack.

The botnet has increased its activity, peaking at 15,000 exploitation attempts per day, and taking a more targeted approach.

The company plans to scale its products, expand to new markets, and grow its marketing and engineering teams.

Tracked as CVE-2025-47813, the flaw leads to the disclosure of the full local installation path of the application.

The attackers used a DKIM-signed phishing email, trusted redirect infrastructure, compromised servers, and Cloudflare-protected phishing pages, but the attack was unsuccessful.

The state-sponsored hackers deployed custom tools and stayed dormant in the compromised environments for months.

Storm-2561 is distributing fake VPN clients through SEO poisoning, deploying trojans, and stealing login information.

Hundreds of GitHub accounts were accessed using credentials stolen in the VS Code GlassWorm campaign.

The vulnerability can be exploited remotely, without authentication, to circumvent existing authentication controls.

The startup relies on AI to turn devices into active agents that understand users’ actions and provide protection in real time.

Google paid over $3.7 million for Chrome vulnerabilities, and more than $3.5 million for cloud security defects.

The startup is building a control pane to help organizations oversee autonomous AI agents and rapidly adopt them.

The flaws can be exploited to manipulate data and bypass security restrictions, potentially leading to code execution.

The issue allows attackers to inject SQL queries and extract sensitive information from the database.

Critical- and high-severity flaws could be exploited to execute arbitrary shell commands or elevate privileges.

The security defects could lead to denial-of-service (DoS) conditions, command execution, or device takeover.

The bugs allowed unauthenticated attackers to execute arbitrary code, steal credentials, and take over servers.