Acquisition

Many dollar banks note on money background

Money

Security Staff Acquisition & Development

Brief

ServiceNow nears $1B deal for identity startup Veza

<body>The Security Weekly 25 index is back near all time highs as the NASDAQ hits another record high.  Funding and acquisitions have shifted to AI as the security industry continues to evolve.  We also had a new IPO, Netskope.  They will replace CyberArk once the Palo Alto Networks acquisition closes, allowing the index to survive another public company acquisition.</body>

<body><p>The Security Weekly 25 index is back near all time highs as the NASDAQ hits another record high.  Funding and acquisitions have shifted to AI as the security industry continues to evolve.  We also had a new IPO, Netskope.  They will replace CyberArk once the Palo Alto Networks acquisition closes, allowing the index to survive another public company acquisition.</p></body>

<body>In the leadership and communications segment, Boards Seeking AI Specialists, A CISO’s Guide to Navigating the Urgent AI Security Storm, How to Write AI Prompts That Get Results (&amp; Don’t Suck), and more!</body>

<body><p>In the leadership and communications segment, Boards Seeking AI Specialists, A CISO’s Guide to Navigating the Urgent AI Security Storm, How to Write AI Prompts That Get Results (&amp; Don’t Suck), and more!</p></body>

Featured image for {“vendor”:”ppworks”,”type”:”segment”,”id”:”14237″} podcast from PPWorks

AI/ML

Venture capital

Security Money: The Index is Back Near Highs as AI Leads the Discussion – BSW #423

<body>Segment 1: Interview with Rob Allen</body>

<body><h3>Segment 1: Interview with Rob Allen</h3></body>

<body>It’s the Year of the (Clandestine) Linux Desktop!</body>

<body><p>It’s the Year of the (Clandestine) Linux Desktop!</p></body>

<body>As if EDR evasions weren’t enough, attackers are now employing yet another method to hide their presence on enterprise systems: deploying tiny Linux VMs. Attackers are using Hyper-V and/or WSL to deploy tiny (120MB disk space and 256MB memory) Linux VMs to host a custom reverse shell and reverse proxy.</body>

<body><p>As if EDR evasions weren’t enough, attackers are now employing yet another method to hide their presence on enterprise systems: deploying tiny Linux VMs. Attackers are using Hyper-V and/or WSL to deploy tiny (120MB disk space and 256MB memory) Linux VMs to host a custom reverse shell and reverse proxy.</p></body>

<body>In this segment, we’ll discuss strategies and mitigations to battle this novel technique with Rob Allen from Threatlocker.</body>

<body><p>In this segment, we’ll discuss strategies and mitigations to battle this novel technique with Rob Allen from Threatlocker.</p></body>

<body><ul><li><a rel="noreferrer noopener" target="_blank" href="https://www.darkreading.com/endpoint-security/pro-russian-hackers-linux-vms-hide-windows">Pro-Russian Hackers Use Linux VMs to Hide in Windows</a></li><li><a rel="noreferrer noopener" target="_blank" href="https://www.bleepingcomputer.com/news/security/russian-hackers-abuse-hyper-v-to-hide-malware-in-linux-vms/">Russian Hackers Abuse Hyper-V to Hide Malware in Linux VMs</a></li><li><a rel="noreferrer noopener" target="_blank" href="https://www.bleepingcomputer.com/news/security/qilin-ransomware-abuses-wsl-to-run-linux-encryptors-in-windows/">Qilin ransomware abuses WSL to run Linux encryptors in Windows</a></li></ul></body>

<body>This segment is sponsored by ThreatLocker. Visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/threatlocker">https://securityweekly.com/threatlocker</a> to learn more about them!</body>

<body><p>This segment is sponsored by ThreatLocker. Visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/threatlocker">https://securityweekly.com/threatlocker</a> to learn more about them!</p></body>

<body>Segment 2: Topic - Threat Modeling Humanoid Robots</body>

<body><h3>Segment 2: Topic - Threat Modeling Humanoid Robots</h3></body>

<body>We're entering the age of human-shaped robots, so it seems like a good time to talk about the fact that they ALREADY HAVE CVEs assigned to them. I guess this isn't a terrible thing - John Connor might have had an easier time if he could simply hack the terminators from a distance...</body>

<body><p>We're entering the age of human-shaped robots, so it seems like a good time to talk about the fact that they ALREADY HAVE CVEs assigned to them. I guess this isn't a terrible thing - John Connor might have had an easier time if he could simply hack the terminators from a distance...</p></body>

<body><p><strong>Resources</strong></p></body>

<body><ul><li><a rel="noreferrer noopener" target="_blank" href="https://www.unitree.com/H2">https://www.unitree.com/H2</a> (watch the video!)</li><li><a rel="noreferrer noopener" target="_blank" href="https://www.scmp.com/tech/tech-trends/article/3332372/chinas-humanoid-robots-get-factory-jobs-ubtechs-model-scores-us112-million-orders">China’s humanoid robots get factory jobs as UBTech’s model scores US$112 million in orders</a></li><li><a rel="noreferrer noopener" target="_blank" href="https://www.scmp.com/tech/article/3331958/big-reveal-xpeng-founder-unzips-humanoid-robot-prove-its-not-human?module=inline&amp;pgtype=article">The big reveal: Xpeng founder unzips humanoid robot to prove it’s not human</a></li><li><a rel="noreferrer noopener" target="_blank" href="https://spectrum.ieee.org/unitree-robot-exploit">Exploit Allows for Takeover of Fleets of Unitree Robots - Security researchers find a wormable vulnerability</a></li><li>100-page Paper: <a rel="noreferrer noopener" target="_blank" href="https://arxiv.org/pdf/2509.14096">The Cybersecurity of a Humanoid Robot</a></li><li>5-page Paper: <a rel="noreferrer noopener" target="_blank" href="https://arxiv.org/pdf/2509.14139v3">Cybersecurity AI: Humanoid Robots as Attack Vectors</a></li><li>Amazingly, $300 smart vacuums have some of the same exact vulnerabilities and backdoors built into them as the $16,000 humanoid robots! <a rel="noreferrer noopener" target="_blank" href="https://codetiger.github.io/blog/the-day-my-smart-vacuum-turned-against-me/">The Day My Smart Vacuum Turned Against Me</a></li></ul></body>

<body><h3>Segment 3: Weekly News</h3></body>

<body>Finally, in the enterprise security news,</body>

<body><p>Finally, in the enterprise security news, </p></body>

<body><ol><li>A $435M venture round</li><li>A $75M seed round</li><li>a few acquisitions</li><li>the producer of the movie Half Baked bought a spyware company</li><li>AI isn’t going well, or is it?</li><li>maybe we just need to adopt it more slowly and deliberately?</li><li>ad-blockers are enterprise best practices</li><li>firewalls and VPNs are security risks, according to insurance claims</li><li>could you power an entire house with disposable vapes?</li></ol></body>

<body>All that and more, on this episode of Enterprise Security Weekly.</body>

<body><p>All that and more, on this episode of Enterprise Security Weekly.</p></body>

Featured image for {“vendor”:”ppworks”,”type”:”segment”,”id”:”14257″} podcast from PPWorks

Endpoint/Device Security

AI benefits/risks

Year of the (Clandestine) Linux Desktop, topic, and the news – Rob Allen – ESW #433

<body>Segment 1: Interview with Dave Lewis from 1Password</body>

<body><h3>Segment 1: Interview with Dave Lewis from 1Password</h3></body>

<body>In this week's sponsored interview, we dive into the evolving security landscape around AI agents, where we stand with AI agent adoption. We also touch on topics such as securing credentials in browser workflows and why identity is foundational to AI agent security.</body>

<body><p>In this week's sponsored interview, we dive into the evolving security landscape around AI agents, where we stand with AI agent adoption. We also touch on topics such as securing credentials in browser workflows and why identity is foundational to AI agent security.</p></body>

<body><ul><li><a rel="noreferrer noopener" target="_blank" href="https://www.darkreading.com/identity-access-management-security/1password-addresses-critical-ai-browser-agent-security-gap">1Password Addresses a Critical AI Browser Agent Security Gap</a></li><li><a rel="noreferrer noopener" target="_blank" href="https://blog.1password.com/1password-now-available-in-comet-the-ai-browser-by-perplexity/">1Password Now Available in Comet - the AI Browser by Perplexity</a></li></ul></body>

<body>This segment is sponsored by 1Password. Visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/1password">https://securityweekly.com/1password</a> to learn more!</body>

<body><p>This segment is sponsored by 1Password. Visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/1password">https://securityweekly.com/1password</a> to learn more!</p></body>

<body><h3>Segment 2: Enterprise News</h3></body>

<body>In this week's enterprise security news,</body>

<body><p>In this week's enterprise security news, </p></body>

<body><ol><li>one big acquisition, two small fundings</li><li>not all AI is bad</li><li>deepfakes are getting crazy good</li><li>make sure you log what your AI agents do</li><li>Copilot prompt injection</li><li>NordVPN tries to pull a jedi mind trick on us</li><li>failure rate in AI adoption is a feature not a bug?</li><li>using facial recognition to find Tinder profiles</li><li>a predictable squirrel story</li></ol></body>

<body>Segment 3: Two interviews from Oktane 2025</body>

<body><h3>Segment 3: Two interviews from Oktane 2025</h3></body>

<body><strong>Interview with Connor Mulherin of TechSoup</strong></body>

<body><p><strong>Interview with Connor Mulherin of TechSoup</strong></p></body>

<body>The cybersecurity landscape in the nonprofit sector is evolving quickly, with organizations facing unique challenges due to limited resources, sensitive mission-driven work, and developing policies and training programs. Connor Mulherin, Director and GM of Validation Services at TechSoup, will discuss the industry's need for accessible and collaborative solutions to provide affordable technology leadership and security guidance. It will highlight how nonprofit organizations can build long-term digital resilience and combat these growing challenges.</body>

<body><p>The cybersecurity landscape in the nonprofit sector is evolving quickly, with organizations facing unique challenges due to limited resources, sensitive mission-driven work, and developing policies and training programs. Connor Mulherin, Director and GM of Validation Services at TechSoup, will discuss the industry's need for accessible and collaborative solutions to provide affordable technology leadership and security guidance. It will highlight how nonprofit organizations can build long-term digital resilience and combat these growing challenges.</p></body>

<body><ul><li><a rel="noreferrer noopener" target="_blank" href="https://www.techsoup.org">www.techsoup.org</a></li><li><a rel="noreferrer noopener" target="_blank" href="https://techimpact.org/news/techsoup-tech-impact-launch-cto-program-small-npos">Tech Impact Launch CTO Program For Small NPOs</a> </li><li><a rel="noreferrer noopener" target="_blank" href="https://techimpact.org/virtualCTOprogram">Virtual Chief Technology Officer Program for the Nonprofit Sector</a></li></ul></body>

<body><strong>Interview with Mike Poole, Director of Cyber Security at Werner Enterprises</strong></body>

<body><p><strong>Interview with Mike Poole, Director of Cyber Security at Werner Enterprises</strong></p></body>

<body>In today's digital landscape, cybersecurity is not just a technical issue—it’s a business imperative. Organizations that prioritize cybersecurity culture see fewer incidents and stronger resilience against evolving threats. But how do you foster a security-first mindset across an organization?</body>

<body><p>In today's digital landscape, cybersecurity is not just a technical issue—it’s a business imperative. Organizations that prioritize cybersecurity culture see fewer incidents and stronger resilience against evolving threats. But how do you foster a security-first mindset across an organization?</p></body>

<body>This session will explore the critical components of building and maintaining a robust cybersecurity culture, starting with executive leadership buy-in—a fundamental step in securing resources and driving organizational change. We’ll then dive into the power of monthly phishing exercises, which reinforce awareness and preparedness. Attendees will also learn how to develop effective training programs that engage employees at all levels and create lasting behavioral change. Finally, we’ll discuss the role of cybersecurity-themed events, particularly during Cybersecurity Awareness Month, as a powerful tool to capture attention and reinforce key security principles.</body>

<body><p>This session will explore the critical components of building and maintaining a robust cybersecurity culture, starting with executive leadership buy-in—a fundamental step in securing resources and driving organizational change. We’ll then dive into the power of monthly phishing exercises, which reinforce awareness and preparedness. Attendees will also learn how to develop effective training programs that engage employees at all levels and create lasting behavioral change. Finally, we’ll discuss the role of cybersecurity-themed events, particularly during Cybersecurity Awareness Month, as a powerful tool to capture attention and reinforce key security principles.</p></body>

<body>This segment is sponsored by Oktane by Okta. Visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/oktane">https://securityweekly.com/oktane</a> to learn more about them!</body>

<body><p>This segment is sponsored by Oktane by Okta. Visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/oktane">https://securityweekly.com/oktane</a> to learn more about them!</p></body>

Featured image for {“vendor”:”ppworks”,”type”:”segment”,”id”:”14251″} podcast from PPWorks

Securing AI Agents with Dave Lewis, Enterprise News, and interviews from Oktane 2025 – Dave Lewis, Mike Poole, Conor Mulherin – ESW #430

<body>Segment 1 - Interview with Dr. Anand Singh</body>

<body><h3>Segment 1 - Interview with Dr. Anand Singh</h3></body>

<body>We're always thrilled to have authors join us to discuss their new book releases, and this week, it is Dr. Anand Singh. He seriously hustled to get his new book, Data Security in the Age of AI, out as soon as possible so that it could help folks dealing with securing AI rollouts right now! We'll discuss why he wrote it, how he got it done so quickly, and who needs to read it.</body>

<body><p>We're always thrilled to have authors join us to discuss their new book releases, and this week, it is Dr. Anand Singh. He seriously hustled to get his new book, Data Security in the Age of AI, out as soon as possible so that it could help folks dealing with securing AI rollouts right now! We'll discuss why he wrote it, how he got it done so quickly, and who needs to read it.</p></body>

<body><ul><li>Get the book on Amazon: <a rel="noreferrer noopener" target="_blank" href="https://www.amazon.com/Data-Security-Age-Protecting-AI-Driven-ebook/dp/B0FLVWDYJH">Data Security in the Age of AI</a> (available in Kindle and print)</li></ul></body>

<body>Segment 2 - Topic: The reasons why CISOs buy (and the things that don't matter to them)</body>

<body><h3>Segment 2 - Topic: The reasons why CISOs buy (and the things that don't matter to them)</h3></body>

<body>Val Tsanev, founder of ExecWeb, part of the CyberRisk Alliance family, <a rel="noreferrer noopener" target="_blank" href="https://www.linkedin.com/posts/valeritsanev_ciso-vendorselection-enterprisesales-activity-7381340234472456193-NCL0/">posted shared some VERY spicy insights</a> about how CISOs buy products. This elicited <a rel="noreferrer noopener" target="_blank" href="https://www.linkedin.com/posts/howardholton_a-ciso-colleague-just-published-research-activity-7381457674653249536-giKd/">some passionate responses</a>.</body>

<body><p>Val Tsanev, founder of ExecWeb, part of the CyberRisk Alliance family, <a rel="noreferrer noopener" target="_blank" href="https://www.linkedin.com/posts/valeritsanev_ciso-vendorselection-enterprisesales-activity-7381340234472456193-NCL0/">posted shared some VERY spicy insights</a> about how CISOs buy products. This elicited <a rel="noreferrer noopener" target="_blank" href="https://www.linkedin.com/posts/howardholton_a-ciso-colleague-just-published-research-activity-7381457674653249536-giKd/">some passionate responses</a>.</p></body>

<body>There are many interesting insights, but the biggest and most interesting is that 76% of CISOs choose products that presents the least risk to them, personally. Career safety trumps product performance, it would seem.</body>

<body><p>There are many interesting insights, but the biggest and most interesting is that 76% of CISOs choose products that presents the least risk to them, personally. Career safety trumps product performance, it would seem.</p></body>

<body>In the enterprise security news,</body>

<body><p>In the enterprise security news, </p></body>

<body><ol><li>Shifting Zero</li><li>Cyber insurance, unlike cyber crime, doesn’t pay</li><li>New AI security categories are popping up to serve Agentic and MCP servers</li><li>how tech companies measure AI impact</li><li>first malicious MCP server in the wild</li><li>is your computer mouse listening to you?</li><li>The Korean government did not follow the backup rule of three</li><li>Think you’ve seen the absolute worst idea for a mobile app? Wait until you hear about Neon.</li><li>We have no less than three squirrel stories involving bullets, lasers, and greasy snacks</li></ol></body>

Acquisition

ServiceNow nears $1B deal for identity startup Veza

Security Money: The Index is Back Near Highs as AI Leads the Discussion – BSW #423

Year of the (Clandestine) Linux Desktop, topic, and the news – Rob Allen – ESW #433

Securing AI Agents with Dave Lewis, Enterprise News, and interviews from Oktane 2025 – Dave Lewis, Mike Poole, Conor Mulherin – ESW #430

New book from Dr. Anand Singh, why CISOs buy, and the latest news – Anand Singh – ESW #428

French cybersecurity firm Filigran nets $58M funding

DataCore launches Freedom360 partner program

Fast Five

Selected by the SC Media Editorial team every Tuesday.