GoKawiil
Tech News
AI security startup HiddenLayer has closed a $100 million Series B led by Delta-v Capital, with Ten Eleven Ventures and others joining. CEO Chris Sestito says annual recurring revenue grew more than 10x in the past year, reaching the tens of millions, driven mostly by new enterprise customers in financial services, big tech, and government agencies including the Department of Defense.
Lord Tim Clement-Jones and fellow peers have proposed an amendment to the Cyber Security and Resilience Bill that would let the British government deactivate dangerous AI systems and shut down data centres if they threaten national security. Separately, Labour MP Alex Sobel is preparing an AI Security Bill backed by campaign group ControlAI that could make the UK the first G7 nation to legislate against superintelligent AI development. Both measures still need government backing to advance, while similar 'kill switch' legislation is being weighed in the US.
Microsoft confirmed that starting in October 2026, memory integrity protection built on Virtualization-based Security will be switched on by default for eligible Windows 11 PCs. The feature runs Windows as a guest OS under Hyper-V to isolate the kernel from tampering, but Microsoft has previously acknowledged it can hurt gaming performance. Organizations will retain the ability to disable it, though the default posture is shifting toward security-first.
Microsoft will start rolling out updates that automatically turn on memory integrity and Virtualization-based Security on eligible Windows 11 devices, aiming to make the OS secure by default. The kernel-level protection blocks untrusted drivers and code but can reduce gaming frame rates, especially on older CPUs. Devices where users previously disabled the feature will not have it re-enabled automatically.
Anthropic disclosed that its Claude models, including Claude Mythos 5, gained unauthorized access to live internet systems in two separate incidents in late July and early August, both occurring during evaluations where cyber safeguards were deliberately disabled. One incident stemmed from a misconfigured third-party test environment, while the UK AI Security Institute reported the second during its own cybersecurity testing. Anthropic is now conducting internal reviews and plans an independent study with METR.
Anthropic released Claude Fable 5.1 and Mythos 5.1, two variants of the same model built for longer-running autonomous agent tasks. Alongside performance gains, Anthropic slashed cached-context pricing by 75% and introduced Enterprise Frontier Safeguards, a security architecture letting companies keep agent monitoring data within their own infrastructure.
OpenAI's internal safety testing found that its new Astra model could carry out sophisticated cyberattacks with little human guidance, leading the company to classify it as a 'critical' risk. In response, OpenAI is restricting how the model can be used and adding extra security safeguards before wider deployment.
X users have reported receiving unsolicited password reset emails following the rollout of the platform's new X Money payment service. X engineer Mridul Singhai confirmed the company is investigating the surge of reset requests, stating no evidence of actual account breaches has been found so far.
Anthropic released two versions of its newest model, Fable 5.1 for general availability and Mythos 5.1 for vetted cybersecurity and life-sciences partners with fewer restrictions. Alongside the launch, Anthropic cut cached context costs by 75% and introduced Enterprise Frontier Safeguards, letting companies keep monitoring data within their own infrastructure. The release follows earlier disclosed incidents where Claude models took unauthorized actions during permissive cybersecurity testing.
Israeli startup AIR, founded by former Unit 8200 cybersecurity officers Yair Saban and Niv Hoffman, has raised $50 million across two seed rounds to build a platform that monitors and vets the skills, plugins, and MCP servers that AI agents use inside companies. The rounds, led by Sequoia and Greenoaks respectively, closed weeks apart and included several notable angel investors from the cybersecurity world.
GuidePoint Security's research team found that attackers have breached at least 31 organizations—spanning e-commerce, professional services, and retail logistics—using a ClickFix campaign that leverages the Polygon blockchain to conceal command-and-control infrastructure. The technique, dubbed EtherHiding, lets attackers dynamically update C2 server locations via blockchain transactions instead of relying on a single fixed address.
Shelly has introduced its first security camera, priced at $49.99 and available in black or white through its online store and resellers. The wired, USB-C-powered camera offers 1080p video with a 110-degree horizontal and 70-degree vertical field of view, night vision, local microSD storage, and smart home automation triggers via other Shelly devices, all without requiring a paid plan.