Securityweek

• Israeli startup QIZ Security announced on Thursday that it has raised $17 million in seed funding to develop its cryptographic governance platform. • The funding round was led by Bessemer Venture Partners and Merlin Ventures, with additional support from Evolution Equity Partners, Qbeat Ventures, Singtel Innov8, and Qino Cyber Capital. • The company's platform focuses on cryptographic posture and post-quantum cryptography (PQC) management, which is critical for protecting data against future quantum computing threats.

• Attackers leveraged a vulnerability in Langflow (CVE-2025-3248) to execute a sophisticated ransomware attack powered by agentic AI. • The breach utilized LLM agents to automate a complex, multi-stage intrusion process involving real-time reasoning, reconnaissance, credential theft, and lateral movement. • This incident is significant because it demonstrates how AI agents can combine known exploitation techniques to automate high-level attack chains that previously required manual human effort.

• Straiker has raised $64 million in Series A funding to develop and scale its AI security platform. • The startup's technology enables enterprises to identify AI agents within their environments and provides visibility into their behavior, access levels, and associated risks. • This funding addresses the growing security gap as companies rapidly deploy autonomous AI agents that may introduce new vulnerabilities or unauthorized access.

• SecurityWeek highlights several critical cybersecurity events, including a data breach at Tata Electronics, layoffs at Snyk, and the discovery of the "Gaslight" backdoor in macOS. • Reports indicate that Russia utilized Cellebrite technology to compromise an activist's phone, while the Five Eyes intelligence alliance issued an urgent warning regarding AI-driven threats. • Industry experts Tod Beardsley and Joshua Goldfarb emphasize that exploits are often symptoms of deeper failures and that organizations require repeatable frameworks to defend AI applications in production.

• Magnitude has officially emerged from stealth mode after securing $10 million in seed funding. • The company aims to redefine Third-Party Risk Management (TPRM) by utilizing autonomous AI agents to streamline and enhance security processes. • This development matters as it introduces AI-driven automation to a critical area of cybersecurity, potentially reducing the manual burden of managing vendor risks.

• Twenty-six cybersecurity merger and acquisition (M&A) deals were announced during May 2026. • Major industry players involved in these transactions include Cisco, Zscaler, Akamai, Check Point, Cyera, Dragos, and WatchGuard. • This surge in activity highlights a period of intense consolidation as leading security firms seek to expand their capabilities and market share.