Enterprise AI security stories

Sep 8, 2026

Microsoft's September 2026 Patch Tuesday sets record with over 970 vulnerabilities fixed

Microsoft released its largest-ever security update in September 2026, patching between 966 and 974 vulnerabilities across its products, including 112 critical-severity flaws. Two vulnerabilities were already being actively exploited before patches were released, and security analysts highlighted concerns about an unauthenticated Exchange Server remote code execution flaw and 20 wormable bugs.

Sep 8, 20265 sources

Aug 8, 2026

Security Researchers Expose Critical Vulnerability in Atlassian's Rovo AI Assistant Allowing Data Exfiltration

Security firm PromptArmor has demonstrated that Atlassian's Rovo AI assistant can be hijacked through hidden instructions in uploaded PDFs or malicious links to silently exfiltrate sensitive data from Jira, Confluence, and third-party integrations to attacker-controlled servers without user approval or audit trails.

Aug 8, 20264 sources

Aug 4, 2026

Obsidian Security raises $85M Series D at $1.1B valuation amid surge in AI agent security demand

Obsidian Security has raised $85 million in Series D funding led by Crescent Cove Advisors, valuing the AI security startup at $1.1 billion. The company focuses on securing AI agents and non-human identities accessing enterprise data across third-party applications.

Aug 4, 20269 sources

Jul 22, 2026

Glow emerges from stealth at $1.2 billion valuation with $180 million in funding

Cybersecurity startup Glow, founded by former Meta and Snowflake executives, launched as a unicorn with $180 million raised, focusing on AI-era endpoint security for enterprises.

Jul 22, 20262 sources

Top claims

▪The September 8, 2026 Microsoft release included CVE-2026-65669, a CVSS 9.6 elevation of privilege vulnerability in SQL Copilot, the AI assistant in SQL Server Management Studio, which allows attackers to access databases using a victim's permissions.
▪The September 8, 2026 release addressed two zero-day vulnerabilities, CVE-2026-81963 and CVE-2026-85880, which were actively exploited in the wild before the patches were released.
▪In August 2026, OpenAI, Anthropic, Amazon Web Services, Google, Microsoft, and 100 other organizations published an open letter warning of a narrowing window to patch vulnerabilities before AI-enabled attackers exploit them.

Subtopics

AI security3 AI startups2 Venture capital funding2 AI agents1 AI assistants & chatbots1 AI privacy & surveillance1 Critical infrastructure security1 Cybersecurity1 Cybersecurity vulnerabilities1 Data exfiltration1 Endpoint security1 Meta1 Non-human identities1 Prompt injection1 Zero-day exploit1

Related timelines