CyberNews HelmGuard Raises $7.3 Million to Revolutionize Risk Management with AI-Powered Platform Cybersecurity startup HelmGuard has secured a significant $7.3 million in seed funding, co-led by Infinity Ventures and Frontline, to further develop its innovative agentic governance, risk, and compliance (GRC) and security platform. Founded in 2024 by former Palantir executive John Daley and Jack Miller, … Read more
A New AI Attack Vector Exposes Enterprise Data to Threat Actors In a disturbing development that highlights a critical flaw in modern enterprise artificial intelligence (AI) pipelines, security researchers have identified a new type of attack flow that can bypass standard security controls and hijack an organization’s data. Dubbed “workflow identity hijacking,” this attack vector … Read more
Google’s Threat Intelligence Group has been sounding the alarm about a growing trend in cybersecurity threats: the increasing use of artificial intelligence (AI) by both nation-state actors and financially motivated attackers to automate and scale their attacks. This development is giving lesser-resourced groups unprecedented capabilities, making it essential for enterprises to be aware of this … Read more
HelmGuard, a UK-based startup founded in 2024 by former Palantir executive John Daley and Jack Miller, has secured $7.3 million in seed funding to further develop its agentic governance, risk, and compliance (GRC) and security platform. The investment round was co-led by Infinity Ventures and Frontline, with additional support from FinTech Collective, Stage 2 Capital, … Read more
A New AI Attack Vector Threatens Enterprise Data Security, Highlighting Authorization Flaws in Modern AI Pipelines Security researchers have identified a sophisticated artificial intelligence (AI) attack flow that can bypass standard security controls and hijack an organization’s sensitive data. Dubbed “workflow identity hijacking” by Noma Labs, the attackers exploit an authorization design flaw in modern … Read more
US Government Accuses Chinese Firms of Illicitly Extracting Capabilities from Top US AI Models In a shocking revelation, the US government has accused several Chinese artificial intelligence (AI) firms of engaging in massive “distillation campaigns” to covertly extract billions of tokens from leading US AI models. The FBI, National Security Agency (NSA), and Cybersecurity and … Read more
A staggering 90% of vulnerabilities discovered by Anthropic’s Claude Mythos AI model have failed to reach the disclosure stage, and only a tiny fraction of those that did have been fixed. This alarming gap highlights a human bottleneck in validating new flaws and coordinating their remediation, rather than in discovering them. The analysis, conducted by … Read more
US Government Accuses Chinese AI Firms of Stealing Proprietary Capabilities from US Models The US government has accused several top Chinese artificial intelligence (AI) firms of engaging in massive campaigns to extract proprietary capabilities from leading US AI models. The firms, which include Alibaba, DeepSeek, and Moonshot AI, allegedly used a process called distillation to … Read more
Cybersecurity’s Unholy Trinity: Mythos Vulnerability Firehose Hits a Human Bottleneck A new analysis of public data from Anthropic’s Project Glasswing has revealed a disturbing trend in the world of vulnerability research. Despite generating an astonishing 26,153 potential security flaws using its Claude frontier model, only a tiny fraction – less than 10% – have made … Read more
Google has just patched a seventh Chrome zero-day bug this year, with another high-severity vulnerability being actively exploited by attackers. The latest bug, CVE-2026-87491, affects the V8 JavaScript and WebAssembly engine in Google’s Chrome browser, allowing remote attackers to execute arbitrary code inside the web browser’s sandbox via crafted HTML pages. The security update was … Read more