Tyler Lalicker

Zafran Security, the NYC-based #AI-native Threat Exposure Management platform, has raised $60M in Series C funding, bringing total funding to $130M. The round was led by Menlo Ventures, with participation from Sequoia Capital, Cyberstarts, PSP Growth, Vintage Investment Partners, and Knollwood Investment. Zafran Security helps security teams stop vulnerability exploitation everywhere by proving that 90% of critical vulnerabilities are not exploitable — and rapidly remediating the 10% that truly matter. With the launch of Agentic Exposure Management, the platform now completes the entire lifecycle of asset inventory, vulnerability detection, risk assessment, and autonomous remediation. Since its previous round, Zafran has doubled its valuation and more than tripled ARR, driven by adoption across healthcare, tech, financial services, and manufacturing. The company now serves multiple Fortune 500 customers. The new capital will accelerate product innovation and global expansion as Zafran continues redefining how organisations understand, prioritise, and eliminate real cyber risk. Team- Sanaz Yashar Co-Founder & CEO Ben Seri Co-Founder & CTO Snir Havdala Co-Founder & CPO Rotem Peled-Dvir SVP Finance Anthony Thomas SVP Sales Nick Fisher VP Marketing Hadas Bergman VP Business Operations Rachel Barouch-Haik VP HR & Operations #Cybersecurity #AI #ThreatExposureManagement #VulnerabilityManagement #EnterpriseSecurity #StartupFunding #SeriesC #SecurityOperations #AgenticAI #Infosec

77

1 Comment

TL:DR: The DoW officially issues guidance to contracting officers to remove references to independent assessment requirements and primes lose their ability to flow down certification requirements to subs. We are not expecting to hear anything after the 60-day review of CMMC concludes, as the output is simply recommendations, which will likely remain internal until direction is solidified.

15

Every year, RSA Conference brings the cybersecurity industry together to ask what comes next. This year, the answer is becoming clearer: we’re moving from theoretical capabilities to measurable operational outcomes. In my latest piece, I break down three trends to watch at RSAC 2026: Agentic AI: The conversation is shifting from what AI can do to what it has proven it can improve—especially when paired with human expertise. Exposure Management: Organizations are moving beyond vulnerability lists to focus on what actually drives risk. Platform Consolidation: Security teams need platforms that reduce operational friction, not just aggregate more data. The common thread: security leaders are prioritizing faster detection, smarter investigations, and more decisive response. At Arctic Wolf, this shift has guided how we’ve built the Aurora Platform, combining AI, human expertise, and real-world operational intelligence to deliver outcomes that matter. Learn more: https://lnkd.in/eMnXPibu

72

2 Comments

Happy to explore the data further from last year’s SANS Institute State of ICS/OT Security survey. How important are regulations and standards? Do they move the needle on real world incidents? Read more below.. 👀

14

Sharing a book recommendation to help you check your organizational quantum readiness and where there may be exposure. “The window is narrower than your roadmap assumes.” Walt Powell CISSP, CISM

6

A foreign threat actor infiltrated the Kansas City National Security Campus (KCNSC), a key manufacturing site within the National Nuclear Security Administration (NNSA), exploiting unpatched Microsoft SharePoint vulnerabilities, according to a source involved in an August incident response at the facility. The breach targeted a plant that produces the vast majority of critical non-nuclear components for US nuclear weapons under the NNSA, a semi-autonomous agency within the Department of Energy (DOE) that oversees the design, production, and maintenance of the nation’s nuclear weapons. Honeywell Federal Manufacturing & Technologies (FM&T) manages the Kansas City campus under contract to the NNSA. https://lnkd.in/giNSG9P5

21

1 Comment

Seriously flatlined. We analyzed three years of #threat #detection and #response data. Despite widespread #AI adoption and increased #security #investment across the industry, the outcomes #defenders care about most have not meaningfully improved. Fewer #alerts does not mean stronger security. The real question is not “Are alerts down?” It is “Is risk down?” The 2026 State of Threat Detection and Response reveals what thousands of #SOC leaders are experiencing firsthand. Download the report: https://lnkd.in/dKxDniia #ThreatDetection #ResearchReport #VectraAI

26

1 Comment

[From Stamus Labs] We just posted the weekly Declaration of Compromise™ (DoC) threat detection update for Clear NDR. This week there are 4 new named threat detections and enhanced detection coverage for 19 named threats. See the full list of improvements: https://hubs.la/Q044nYYR0

1