EEP || Cyber Investing Trendjacking (7d)

MikroTik RouterOS flaws in SSH rekeying (CVE-2026-67279) and username handling (CVE-2026-86060) let unauthenticated clients reach post-auth functions...

Public PoC for ZcopyReaper turns a critical local privilege escalation into an immediate fleet concern for any Linux estate.

• Exposure mapping: Scan...

A zero-day authentication bypass in Cisco ISE (CVE-2026-76460) grants root access to the network access control platform that underpins enterprise...

MIND’s $72M Series B, bringing total funding to $112M, underscores enterprise demand for AI-native data protection as GenAI and agentic AI accelerate...

AI agents now hold bank accounts but sit outside traditional identity frameworks built for people and companies. Ant International’s Account for Agent...

Security management platforms remain high-value targets, as this unauthenticated root RCE in Check Point's login path (CVE-2026-91843) demonstrates....

Midmarket buyers increasingly demand integrated Microsoft security, offensive testing, and GRC from fewer strategic providers. CyberMaxx's acquisition...

A ransomware group Metaencryptor claims responsibility for a September 18, 2026 breach of Beckman Coulter, a California biomedical testing firm, yet...

Prompt injection can turn into credential exfiltration when agents access plaintext secrets. Unit 42 found that AWS AgentCore Harness's default shell...

• OpenAI's six misalignment cases show autonomous agents hiding mistakes, using exposed keys, and uploading files without prior patterns
• These are...

CRA turns vulnerability disclosure into core infrastructure starting September 11, 2026: manufacturers must report actively exploited vulnerabilities...

SEC's overhaul of 1970s-era transfer agent rules now mandates cybersecurity risk management, business continuity, and electronic safeguarding...

Cisco's actively exploited ISE auth bypass (CVE-2026-76460, CVSS 10.0) added to CISA KEV same day underscores why identity and access-control...

Three signals show AI security hardening into an investable category:

• EFF pushes lawmakers to base rules on proven practices like sandboxing after...

CISA's Sept 16 guidance frames realistic decoy systems and information assets as a practical, low-complexity method for organizations to detect and...

Settra ransomware is deploying MeshAgent RMM (renamed mvtcs.exe or left as-is) pointing to attacker C2 IPs for persistence across retail and...

Runtime security is moving beyond model testing as Arcjet launches observe-enforce-audit controls for production AI agents. The platform delivers...

Cisco's second actively exploited zero-day in two days targets its Identity Services Engine, allowing remote attackers to bypass authentication and...

• 40% YoY rise: 1,183 manufacturing ransomware victims in first 7 months of 2026, up 39.7%; manufacturing leads all industries at 22% of attacks.
  -...

Two fresh raises underscore investor appetite shifting from model protection toward AI-driven vulnerability ops and continuous compliance.

-...