Duncan Riley
Latest from Duncan Riley
Global 2000 companies lag on domain security despite rising cyber risks
Despite gradual improvements, many of the world’s largest companies remain exposed to domain-based cyber risks as attackers increasingly exploit weaknesses outside the traditional corporate firewall. That’s according to Corporation Service Co.‘s Domain Security Report 2026, released today. It examines the domain security posture of Forbes Global 2000 companies and compares them with the world’s top 100 ...
HackerOne launches Good Faith AI Research Safe Harbor to protect responsible AI testing
Offensive security solutions firm HackerOne Inc. today announced the launch of the Good Faith AI Research Safe Harbor, a new industry framework that establishes clear authorization and legal protections for researchers testing artificial intelligence systems in good faith. The framework seeks to address the issue whereby, as AI systems scale rapidly across critical products and services, legal ...
Anthropic’s official Git MCP server hit by chained flaws that enable file access and code execution
Anthropic PBC’s official Git Model Context Protocol server has several security vulnerabilities that can lead to arbitrary file access and, in some scenarios, full remote code execution triggered entirely through prompt injection. That’s according to a new report out today from artificial intelligence security startup Cyata Security Ltd. The flaws affect mcp-server-git, the reference implementation of Anthropic’s ...
Sophos introduces Workspace Protection to simplify hybrid and remote work security
Cybersecurity firm Sophos Ltd today announced the launch of Workspace Protection, a new service that expands its portfolio with an accessible and affordable alternative to heavyweight and cost-intensive secure access service edge solutions for securing hybrid and remote work. Built around the Sophos Protected Browser, the new service allows organizations to protect applications, data, users and guests ...
Indirect prompt injection in Google Gemini enabled unauthorized access to meeting data
A new report out today from cybersecurity company Miggo Security Ltd. details a now-mitigated vulnerability in Google LLC’s artificial intelligence ecosystem that allowed for a natural-language prompt injection potentially to bypass calendar privacy controls and exfiltrate sensitive meeting data via Google Gemini. The issue arose from Gemini’s deep integration with Google Calendar, which allows the AI ...
Nvidia’s NVentures backs Harmonic AI in funding round for mathematical superintelligence
Mathematical superintelligence startup Harmonic AI Inc. revealed today that NVentures, the venture capital arm of Nvidia Corp., was among the investors in its $120 million Series C round that was raised on a $1.45 billion valuation in November. The funding is being used to accelerate Harmonic’s momentum in developing Aristotle, which the company claims is the world’s ...
GovDash secures $30M to expand AI-driven government contracting software
GovDash, a startup offering artificial intelligence for government contracting, revealed today that it has raised $30 million in new funding to invest in customer success and continue growing its presence in New York and Virginia. Founded in 2021, GovDash, formally Realize Inc., offers an AI-powered software platform designed to help companies that pursue contracts with ...
Cloudflare buys Human Native to strengthen licensed data access for AI developers
Cloud connectivity provider Cloudflare Inc. today announced that it has acquired Human Native Ltd., an artificial intelligence data marketplace startup that connects creators and AI developers, for an undisclosed price. Founded in 2024, Human Native was built with the idea that creative and expert content shouldn’t be used without consent in large-scale AI training and inference tasks. ...
Higgsfield raises $80M on $1.3B valuation to scale AI video platform
Generative artificial intelligence video startup Higgsfield Inc. announced today that it has raised $80 million in new early-stage funding on a more than $1.3 billion valuation. The funding is intended to support enterprise and international expansion of AI models built for commercial advertising, marketing content production and music videos, as well as continued research and ...
Nozomi Networks launches new Vantage IQ private AI assistant for OT and IoT security teams
Industrial cybersecurity firm Nozomi Networks Inc. today announced the launch of the new Vantage IQ, a private, company-trained artificial intelligence assistant for operational technology and internet of things security teams. The new assistant has been designed to help with the issue of cyberattacks on critical infrastructure reaching historic highs at a time when shortages of OT and ...









