ISMG Editors: ToolShell Exploit Blurs Crime and Espionage

Anna Delaney • August 1, 2025

In this week's update, four ISMG editors discussed the latest on the ToolShell exploit and the rise of Warlock ransomware, why IT-OT integration may not be the best answer for industrial security and what to expect next week from ISMG Studio at Black Hat Conference 2025.

Data Privacy

New York Unveils 'Nation-Leading' Water Sector Cyber Rules

Latest

Agentic AI

Safe Raises $70M Series C to Scale Cyber Risk Management

Michael Novinson • August 1, 2025

Safe's $70 million Series C will fund expanded capabilities across its cyber risk quantification, exposure management and third-party oversight tools. The company says its agentic AI vision – cyber AGI – will transform how enterprises manage and mitigate cyberthreats.

Agentic AI

Noma Raised $100M to Expand Agentic AI Security Platform

Michael Novinson • August 1, 2025

With agentic AI deployments accelerating, Noma Security’s $100 million Series B will fuel development of risk management and runtime protection features. CEO Niv Braun said demand for securing agentic AI has surged among Fortune 500 firms and healthcare and financial institutions.

Governance & Risk Management

Genomics Gear Firm Pays $9.8M to Settle False Cyber Claims

Marianne Kolbasuk McGee • August 1, 2025

Genomics sequencing firm Illumina Inc. has agreed to pay $9.8 million to resolve False Claims Act whistleblower allegations that it sold software and systems containing cybersecurity vulnerabilities over more than seven years to government agencies.

Artificial Intelligence & Machine Learning

AI Still Writing Vulnerable Code

Rashmi Ramesh • August 1, 2025

There's been little improvement in how well AI models handle core security decisions, says a report from application security company Veracode. Large language models introduce vulnerabilities in nearly half of test cases when asked to complete secure code tasks, it found.

View to a Patch: Google Tweaks Its Vulnerability Disclosure

Mathew J. Schwartz • August 1, 2025

Google is trying out a new approach to publicizing flaws found by its in-house bug hunters meant to get patches more rapidly into end users' hands. Under a trial policy effective immediately, Google's Project Zero team will publish a general alert to the public within seven days.

Artificial Intelligence & Machine Learning

AI Agents Can Hack Smart Contracts on Autopilot

Rashmi Ramesh • August 1, 2025

Armed with just a smart contract address, researchers developed an autonomous artificial intelligence tool that can scan for vulnerabilities, write working exploits in the Solidity blockchain programming language and siphon funds. "It behaves more like a human hacker," said its co-creator.

Agentic AI

What Makes an AI Startup Fundable - From a VC Who Knows

Yamini Kalra • August 1, 2025

Q2 2025 saw AI dominate global VC funding, grabbing $47.5 billion of the $94.6 billion raised. AI Investor Umesh Padval breaks down what makes AI infrastructure startups worth betting on - from platform depth and speed to regional ecosystems and exit timing.

Artificial Intelligence & Machine Learning

Overcoming the Limitations of Using AI Security in Telecom

Suparna Goswami • August 1, 2025

Telecom firms face rising cyberthreats, growing regulatory pressure and shrinking budgets. But instead of chasing flashy solutions, the industry should focus on strengthening its security fundamentals, said Silke Holtmanns, telecommunication and critical infrastructure security expert at Blue Hour.

Data Privacy

Why Legal Woes Continue to Mount Over Health Data Trackers

Marianne Kolbasuk McGee • August 1, 2025

The use on online tracking tools on the health-related websites and apps of HIPAA and non-HIPAA regulated entities continues to be a lightning rod due to a long list of ongoing data privacy, regulatory and legal concerns, said partner and attorney Elizabeth Hodge of the law firm Akerman.

API Security

Wallarm Secures $55M to Safeguard API-Driven Business Logic

Michael Novinson • July 31, 2025

With AI now outpacing cloud in enterprise adoption, Wallarm is evolving its API security platform to safeguard not just endpoints, but the business logic that drives digital revenue. With $55 million in new funding, the company is targeting CIOs and expanding globally to meet demand across sectors.

Blockchain & Cryptocurrency

Cryptohack Roundup: WOO X Probes $14M Breach

Rashmi Ramesh • July 31, 2025

This week, WOO X investigated a $14M breach, Samourai Wallet founders pleaded guilty, AML Bitcoin founder was sentenced to seven years for fraud and money laundering and Hyperliquid dismissed hack rumors.

Access Management

How the CyberArk Deal Is Different From Past Palo Alto M&A

Michael Novinson • July 31, 2025

Palo Alto Networks aims to acquire CyberArk for $25 billion, marking a major shift from its startup-focused M&A approach. Gartner VP Analyst Charlie Winckless says the deal highlights how AI and machine identity are reshaping what platform security vendors need to deliver.