RevEng.AI has raised $15 million in Series A funding led by the NATO Innovation Fund to enhance its AI-powered software verification platform. The company’s technology analyses compiled binaries to detect vulnerabilities and hidden components, addressing growing risks posed by AI-generated code and third-party software.
Finnish startup CRACI has raised €1.4 million in pre-seed funding to further develop its cybersecurity compliance platform targeting the upcoming EU Cyber Resilience Act. The funding round, led by Lifeline Ventures, supports CRACI's efforts to automate compliance for companies facing stricter European software security regulations.
Researchers have uncovered a malicious repository on Hugging Face that posed as an OpenAI release and distributed infostealer malware to Windows systems. The incident raises concerns about the security of AI model registries and the increasing sophistication of supply chain attacks targeting the AI ecosystem.
A widely used open source tool for monitoring machine learning systems was compromised when attackers deployed a malicious version that harvested user credentials. The threat posed a risk to any environment where the affected release was run, raising concerns about the security of software supply chains. The compromised release was detected and removed within 12 hours.
Aikido Security has launched Aikido Endpoint, a new security solution aimed at protecting developer workstations engaged in AI-powered software development. The product addresses the rising risks of supply chain attacks linked to open-source packages, IDE extensions, and AI tools. As AI accelerates software development, Aikido Endpoint positions itself as a lightweight, automated layer against evolving threats.
Stay informed with curated insights delivered weekly to your inbox.