Robinhood Ventures Fund II opens a retail window into security startups
Robinhood Ventures Fund II's listed debut puts retail money behind AI security, identity, and counter-drone startups.
The Latest
Exploited WinSock driver flaw tops Microsoft’s 398-fix August release
Microsoft's August update batch closes 398 flaws led by a WinSock driver zero-day already under attack.
Adobe ships urgent fixes for three maximum-severity app flaws
Adobe's August security batch includes three CVSS 10.0 bugs in ColdFusion and Campaign Classic with a Priority 1 rating.
Stolen AI gateway packages exposed secrets at 2,100 organizations
A CloudSEK dataset maps the March LiteLLM poisoning campaign to secret exposure at thousands of organizations.
Path traversal bug opens VMware vCenter to stealthy remote takeover
Attackers are exploiting a patched vCenter flaw to plant reverse SSH tunnels and hold onto compromised servers.
Cisco firewalls rebootable by crafted SSL VPN requests in new bug
Cisco warns an unauthenticated attacker can crash ASA and FTD firewalls with a single crafted HTTP request.
Kimwolf botnet evolves to mimic browsers with HTTP/2 flood attacks
Unit 42 documents Kimwolf v7, a rebuild that hides DDoS floods behind browser fingerprints and Ethereum domains.
SAP patches maximum-severity flaw in Commerce Cloud data adapter
SAP's August update fixes a CVSS 10.0 hole letting unauthenticated attackers run code in Commerce Cloud.
Zoom annotation bug lets meeting peers seize devices without clicks
A zero-click Zoom flaw lets any meeting participant take over another attendee's device through the annotation feature.
DeadLock ransomware leans on blockchain chat to survive
DeadLock ransomware leans on blockchain chat to survive.
Sting startup hired three suspected Pyongyang IT workers
Hiring teams should scrutinize identity documents from remote candidates: researchers who posed as a crypto startup and hired three people they believe were North Korean operatives found AI-edited IDs and mismatched paperwork in the onboarding process.The operation was a sequel to a 2025 sting by threat intelligence firm BCA LTD, the NorthScan research initiative, and sandbox provider ANY.RUN. This round,…
Split instructions sneak secrets past AI coding assistants
Split instructions sneak secrets past AI coding assistants.
Emulated USB gadgets turn Windows PnP into SYSTEM access
Emulated USB gadgets turn Windows PnP into SYSTEM access.
China-linked crew drops StormEncryptor after N-central raids
China-linked crew drops StormEncryptor after N-central raids.
Spotlight
Poisoned JSON stream plants rogue admins in WordPress shops
Poisoned JSON stream plants rogue admins in WordPress shops.
Kimsuky runs local AI models to sharpen phishing lures
Kimsuky runs local AI models to sharpen phishing lures.
OpenAI’s GPT-5.6-Cyber answers most risky security requests
OpenAI's GPT-5.6-Cyber answers most risky security requests.
Private cellular link let attackers stop a Polish plant turbine
Private cellular link let attackers stop a Polish plant turbine.
Features
US and South Korea warn of Gunra raids on critical sectors
US and South Korea warn of Gunra raids on critical sectors.
Fresh GPG key now signs Firefox and Thunderbird Linux builds
Fresh GPG key now signs Firefox and Thunderbird Linux builds.
SIM card commands turn phones and EV chargers into pawns
SIM card commands turn phones and EV chargers into pawns.
Surtr Defense builds a hardware-agnostic OS for drone defense
Surtr Defense, an RVII portfolio company, builds a hardware-agnostic operating system for counter-drone operations.
Didit builds identity verification and fraud infrastructure
Didit, backed by Robinhood Ventures Fund II, builds identity verification and fraud infrastructure for the financial stack.
Silmaril Security locks down self-improving AI runtimes
Silmaril Security, an RVII portfolio company, builds runtime security for self-improving AI systems that outpace signature-based defenses.
