Cyera

Entro and Asterix, which were built to manage permissions for automated tools, now offer agent protection.

Even the decacorn Cyera has expanded from data protection into AI security.

It seems like everyone wants to be the Wiz of AI security, but Wiz entered a somewhat defined cloud market with few rivals.

These startups are fighting hundreds of competitors in a market that is still being invented.

Interesting.

Cyera on the data side, data security posture management, raises 300 million.

So there's still some good raises out there, right? You're still seeing money flow in, which, uh, which is good, right? And you're seeing a lot of AI funding startup stuff in here, uh, you know, GraySwan, uh, Alcatraz AI.

Like, there's a whole bunch of, you know, AI, uh, strikers in here.

The commitment follows an industry warning that defenders have a narrowing window to use frontier AI before AI enabled attacks pose greater risks to critical public services.

Cybersecurity firm Cyera has disclosed a severe PostgreSQL vulnerability affecting releases dating back to twenty fourteen.

Dubbed PostgresShell, the flaw can allow attackers with replication privileges to execute code and escalate to database superuser.

The vulnerability stems from insufficient authorization in PostgreSQL’s logical decoding functionality.

Cyera found that attackers can supply a file system path as a plugin name causing PostgreSQL to load malicious code with the privileges of the server process.

From there, an attacker could access databases, execute operating system commands, steal sensitive files and establish persistent backdoors.

Cyera says multiple versions of PostgreSQL are affected, fixes are available, and organizations should patch promptly and audit accounts with replication privileges.

Google has updated Chrome to patch an actively exploited zero-day vulnerability in its V8 JavaScript and WebAssembly engine.

I mean, if you use Claude or Copilot or Cursor, you give them your access pretty much, right? So that's the first agent, which makes it really hard because you need to kind of manage human access, human delegated access somehow there.

The second agent is, let's say, you use a SaaS platform like Agentforce or Cyera or some of these.

So you give the-- that SaaS or software platform API keys.

So that plat-- Similar Lumos.