Promptfoo has raised $18.4 million in Series A funding to help organizations secure LLMs and generative AI applications.
The post Promptfoo Raises $18.4 Million for AI Security Platform appeared first on SecurityWeek.
Order out of Chaos – Using Chaos Theory Encryption to Protect OT and IoT
The need for secure encryption in IoT and IIoT devices is obvious, and potentially critical for OT and, by extension, much of the critical infrastructure.
The post Order out of Chaos – Using Chaos Theory Encryption to Protect OT and IoT appeared first on SecurityWeek.
How the Browser Became the Main Cyber Battleground
Until recently, the cyber attacker methodology behind the biggest breaches of the last decade or so has been pretty consistent:
Compromise an endpoint via software exploit, or social engineering a user to run malware on their device;
Find ways to move laterally inside the network and compromise privileged identities;
Repeat as needed until you can execute your desired attack — usually
Sploitlight: macOS Vulnerability Leaks Sensitive Information
The TCC bypass could expose information cached by Apple Intelligence, including geolocation and biometric data.
The post Sploitlight: macOS Vulnerability Leaks Sensitive Information appeared first on SecurityWeek.
Dropzone AI Raises $37 Million for Autonomous SOC Analyst
Dropzone AI has announced a Series B funding round led by Theory Ventures to boost its AI SOC solution.
The post Dropzone AI Raises $37 Million for Autonomous SOC Analyst appeared first on SecurityWeek.
Cybercriminals Use Fake Apps to Steal Data and Blackmail Users Across Asia’s Mobile Networks
Cybersecurity researchers have discovered a new, large-scale mobile malware campaign that’s targeting Android and iOS platforms with fake dating, social networking, cloud storage, and car service apps to steal sensitive personal data.
The cross-platform threat has been codenamed SarangTrap by Zimperium zLabs. Users in South Korea appear to be the primary focus.
“This extensive campaign involved
The cross-platform threat has been codenamed SarangTrap by Zimperium zLabs. Users in South Korea appear to be the primary focus.
“This extensive campaign involved
From Ex Machina to Exfiltration: When AI Gets Too Curious
From prompt injection to emergent behavior, today’s curious AI models are quietly breaching trust boundaries.
The post From Ex Machina to Exfiltration: When AI Gets Too Curious appeared first on SecurityWeek.
Why React Didn’t Kill XSS: The New JavaScript Injection Playbook
React conquered XSS? Think again. That’s the reality facing JavaScript developers in 2025, where attackers have quietly evolved their injection techniques to exploit everything from prototype pollution to AI-generated code, bypassing the very frameworks designed to keep applications secure.
Full 47-page guide with framework-specific defenses (PDF, free).
JavaScript conquered the web, but with
Full 47-page guide with framework-specific defenses (PDF, free).
JavaScript conquered the web, but with
Organizations Warned of Exploited PaperCut Flaw
Threat actors are exploiting a two-year-old vulnerability in PaperCut that allows them to execute arbitrary code remotely.
The post Organizations Warned of Exploited PaperCut Flaw appeared first on SecurityWeek.
Fable Security Raises $31 Million for Human Risk Management Platform
Fable Security has emerged from stealth mode with a solution designed to detect risky behaviors and educate employees.
The post Fable Security Raises $31 Million for Human Risk Management Platform appeared first on SecurityWeek.