News for today:
- [ArmorCode] Four new AI agents for vulnerability remediation. ArmorCode added four AI agents to its platform for remediating vulnerabilities, with agents focused on analyzing cloud risks, assessing exploitability, identifying mitigation strategies, and orchestrating patching. The magic comes from adding context via a risk graph. The challenge is understanding which findings create real attack paths and what actions will reduce risk. Threat actors can cheaply chain together findings that teams previously deprioritized in attacks, and defenders find that AI without context is both inaccurate and expensive. ArmorCode gives AI the security context it needs to fix what actually matters, and do it economically. ArmorCode
- [Obsidian Security] $85 million Series D. Obsidian Security took Series D funding of $85 million, for at a valuation of $1.1 billion, with the money to be used for R&D on securing enterprises against frontier AI models. As enterprises adopt agents from multiple AI ecosystems at once, agent misbehavior is becoming more common, and security teams need one durable control point across all of them. That need has driven Obsidian’s growth among the world’s largest organizations across the Fortune 500 and Global 2000 and that scale is now a strength in itself. As more enterprises adopt Obsidian, its network intelligence compounds, turning patterns spotted at one company into faster protection for every customer on the platform. Obsidian will use the funding to extend that lead, bringing its platform to more of the Fortune 500 and Global 2000 as the standard for securing what AI agents can access and do. Obsidian Security
- [SailPoint] Agentic Fabric + Human Fabric. SailPoint’s Identity Security solution combines identity smarts for both agents and humans, offering real-time discovery, governance, and protection. The human side delivers an updated / transformed set of capabilities. The agent side is a newer capability (as it is for all identity vendors). The SailPoint Identity Security solution, powered by SailPoint Atlas, closes these gaps by delivering an active layer of protection that seamlessly unites human and machine context, and empowers organizations to confidently own every identity while reducing manual security overhead. SailPoint
- [Netskope] Unifying data security. Netskope announced a new unified command center for sensitive data across multiple data environments, in line with its recent research findings re fragmented tooling at most organizations – and the cost / complexity implications of that. Netskope One DataSec Command Center is the core of Netskope’s unified data security strategy: the central control plane that orchestrates protection across all Netskope data security enforcement points. By ingesting signals from across Netskope services, it correlates relationships between users, devices, data stores, and AI assets, surfacing hidden risks and accelerating remediating them by facilitating direct actions, enabling triage or investigative workflows, and recommending policies that are enforced back at Netskope’s data security control points. GA is soon. Netskope
- [Silent Push] Proactive security with better intelligence. Silent Push is offering its threat detection and research data directly to other cybersecurity companies, in the hope that new products and services can be built on a more proactive / future-oriented data set. Unlike traditional threat intelligence that relies on indicators of compromise (IOCs) after an attack has occurred, Silent Push provides first-party infrastructure intelligence and Indicators of Future Attack (IOFA) that identify adversary infrastructure while it is still being built, an average of 104 days before it is weaponized. This enables cybersecurity vendors to deliver earlier detection, richer context, and more proactive protection for their customers. Silent Push
- [Arctic Wolf] Cyber risk accelerator for partners. Arctic Wolf announced an offering for partners that gives visibility into cyber risk via Arctic Wolf’s offerings (or those of another vulnerability management vendor) and can be complemented by the partner’s consulting and advisory services. Through the Cyber AI Readiness Accelerator, partners can work with any existing vulnerability management solution, including Aurora Attack Surface Management, to help organizations gain a complete view of their exposure landscape. By connecting security data, identifying the most critical risks, and prioritizing remediation efforts, the accelerator enables organizations to reduce risk proactively, strengthen cyber resilience, and prepare for the next generation of AI-powered threats. Arctic Wolf
- [Claroty] Public sector play. Claroty established a public sector focused independent subsidiary in the United States, and is pursuing the certifications / designations necessary to operate as such. Claroty Public Sector LLC’s pursuit of FedRAMP High authorization for Claroty xDome for Government reinforces the company’s continuous efforts to meet public sector standards and expectations for protecting the government’s most sensitive environments. The availability of Claroty’s cloud-native, xDome for Government to federal agencies will be an advantage in building operational resilience across CPS environments. Claroty