Surtr Defense builds a hardware-agnostic OS for drone defense
Surtr Defense, a portfolio company of Robinhood Ventures Fund II, builds a hardware-agnostic operating system for drone defense, and the startup sits in a fund cohort that treats counter-UAS as core security infrastructure. RVII lists on the New York Stock Exchange on Aug 13, and the prospectus groups Surtr alongside…
The Latest
Didit builds identity verification and fraud infrastructure
Didit, backed by Robinhood Ventures Fund II, builds identity verification and fraud infrastructure for the financial stack.
Silmaril Security locks down self-improving AI runtimes
Silmaril Security, an RVII portfolio company, builds runtime security for self-improving AI systems that outpace signature-based defenses.
Security and defense startups in Robinhood Ventures Fund II
Robinhood Ventures Fund II lists Aug 13 on the NYSE as RVII with a security cohort spanning digital identity, AI…
OpenAI pauses Astra work after critical cyber risk flag
OpenAI halted internal work on its upcoming Astra model after evaluations suggested it could reach the critical cyber capability threshold.
Head Mare swaps TrueConf installers for PhantomCore backdoor
Kaspersky says the Head Mare group exploited a two-flaw chain in unpatched TrueConf servers to poison client installers with the…
AI research rig finds Apache zero-day plus new desync tricks
PortSwigger's HTTP Terminator generated and proved new HTTP desynchronization techniques and helped expose a patched Apache Traffic Server zero-day.
Poisoned logs turn trusted platforms into agent hijackers
Tenet Security's Ghostjacking demo shows attackers planting instructions in logs that AI agents read and execute, targeting Cloudflare, Datadog, and…
Levi Strauss says social engineering raid stole corporate files
The denim maker told the SEC that a social engineering attack hit three employee computers and led to exfiltration of…
Belgian eID add-on flaws let sites forge legal signatures
A researcher found the Connective browser extension used by two million Belgians could be abused to read card data, steal…
Defense supplier IEH exposes export-controlled data in phishing hit
IEH Corporation told the SEC that a phished employee's Microsoft 365 mailbox exposed engineering files and potentially export-controlled technical data.
Port gate outage in North Carolina draws federal cyber probe
A cyberattack forced all three North Carolina port facilities to delay gate openings and shift to manual processing, with the…
One-click RovoBlast exploit leaks data from Atlassian workspaces
Two firms found independent ways to turn Atlassian's Rovo assistant into a one-click data leak.
AI slop-squatted npm packages hide WEL1DROPPER malware
Nearly 800 npm packages hide a cross-platform RAT and infostealer behind fake README instructions.
Spotlight
Extortion crew UNC6671 leans on personal mobiles in SaaS raids
Google ties a vishing wave against finance and legal firms to UNC6671, which calls staff on personal phones.
WordPress ships emergency fix for pre-auth XSS to RCE chain
WordPress ships an emergency fix for a pre-auth XSS chain that ends in PHP code execution.
Fake error prompts on Mac lead to wallet-draining stealer
Huntress documents a macOS ClickFix stealer that can drain crypto wallets and keychains.
Ohio healthcare tech firm reports 3.8 million record breach
A healthcare billing vendor says 3.8 million people's records were taken from its data center.
Features
Metabase cloud hit first in CVSS 10 zero-day campaign
Attackers used an unknown Metabase flaw to grab admin access and customer data before a patch shipped.
Command injection hole in LoadMaster lands on CISA list
Federal agencies have days to patch an exploited Progress ADC bug that drew hundreds of attack attempts.
Login page quirk lets attackers seize WordPress servers remotely
A pre-auth XSS chain that needs only a crafted username ends in PHP code execution on stock installs.
Prompt injection funnels Jira tickets out of Atlassian Rovo chats
Two research teams found ways to make Atlassian's AI assistant ship Jira and Confluence data to attacker servers.
AI-assisted audit turns up a dozen Cisco router flaws
Cisco's internal review with frontier AI models found 12 SD-WAN and IOS XE bugs, three rated 9.9.
Malware pages show blank screens to scanners, traps to Mac users
Microsoft tracked a macOS ClickFix network that fingerprints visitors before serving its stealer lures.
