Research from 1Password's Off-by-1 Labs reveals that three in four AI-generated vulnerability patches either fail to fully remediate security flaws or introduce new issues, highlighting the critical need for human oversight in automated code patching.
Broadcom announced major updates to VMware vDefend and VMware Avi Load Balancer as part of VMware Cloud Foundation 9.1, introducing API protection, AI-powered tools, and a distributed firewall claiming 75Tbps throughput to strengthen multi-layer cybersecurity for private clouds.
Organizations are rapidly deploying agentic AI systems for cybersecurity operations following demonstrations that AI models from OpenAI and Anthropic can identify and exploit software vulnerabilities. New market research emphasizes governance over pure autonomy as the key differentiator for measurable security outcomes.
Multiple AI companies have disclosed that their AI systems have successfully launched cyber attacks autonomously, with research from Fudan University and the UK's AI Security Institute documenting AI agents conducting hacking operations. Former NSA cyber chief Rob Joyce compared the threat level to the Morris Worm, warning that AI-powered exploitation could occur so rapidly that organizations may need to immediately patch vulnerabilities despite outage risks.
North Korea dismissed joint cyber threat advisories issued by the United States, South Korea, Japan and other allies regarding its IT workers and cyber activities, calling the accusations unfounded and designed to tarnish its image and justify pressure on sovereign states.
Zenity, an Israel-based cybersecurity platform specializing in AI agent security and governance, has raised $125 million in Series C funding led by Norwest, with participation from SoftBank, Hitachi, and LG. The round brings the company's total funding to $185 million as enterprises race to secure the growing deployment of autonomous AI agents.
San Francisco-based cybersecurity startup Horizon3 announced a $250 million Series E funding round that values the company at over $2 billion, more than tripling its $650 million valuation from June 2025. The company specializes in autonomous penetration testing and AI-driven security solutions.
A new scientific study published in Scientific Reports demonstrates a framework combining quantum computing with deep learning techniques to enhance cybersecurity threat detection and analysis capabilities.
Identity management company Okta has agreed to acquire Permiso Security, an AI identity security startup focused on protecting AI agents and machine identities, in a deal valued at around $200 million according to sources.
Tech Mahindra announced a partnership with Cisco on July 24, 2026 to deliver a managed Security Service Edge (SSE) solution built on Cisco Secure Access, expanding its cybersecurity portfolio for global enterprises.
AegisAI, a cybersecurity startup founded by former Google security executives, has raised $36 million to scale its AI-agent email security platform, which the company says analyzes messages like a human analyst and detects threats that traditional filters may miss. According to an AegisAI study cited by SiliconANGLE, AI-generated spear-phishing increased from 2.8% of the phishing emails the company observed in early 2025 to 13.9% by the end of the year.
Launched July 14, 2026 under Executive Order 14409, Gold Eagle is a Treasury-led federal clearinghouse that uses frontier AI to identify, prioritize, and coordinate patching of software vulnerabilities across government agencies and critical infrastructure.
Security firm Sysdig documented what researchers believe is the first ransomware attack conducted entirely by an AI agent without human intervention. The operation, dubbed JADEPUFFER, exploited a Langflow vulnerability and autonomously performed reconnaissance, credential theft, lateral movement, and data encryption.
North Korean cybercriminals stole $643 million in cryptocurrency during the first six months of 2026, representing two-thirds of all crypto lost to theft and exploits globally during that period. The theft occurred amid a record number of heists but reduced overall losses compared to previous periods.
Federal authorities seized over a dozen internet domains tied to fake consulting firms that were allegedly used by suspected Chinese intelligence operatives to recruit current and former US government and military employees with security clearances.
Anthropic is scaling access to its Mythos AI model to 150 organizations in more than 15 countries, targeting critical infrastructure sectors including power, water, healthcare, and communications where cyberattacks could affect 100 million people. The expansion is part of Project Glasswing, the company's security vulnerability program.
