Latest cybersecurity reporting from selected sources.

Goldman Sachs-Led Round Supports Harness's Push Into AI Security and AutomationWith $200 million in Series E funding and a new $5.5 billion valuation, Harness will scale its AI-powered platform for security, compliance and reliability in software development. The investment will support R&D into AI agents, testing, cost optimization and security for AI workloads.

Prompt Injection, HTML Output Rendering Could Be Used for ExploitHackers can exploit vulnerabilities in a generative artificial intelligence assistant integrated across GitLab's DevSecOps platform to manipulate the model's output, exfiltrate source code and potentially deliver malicious content through the platform's user interface.

Deal Targets Open Source Library Risks in Software Supply Chain, Boosts DevSecOpsThe integration of Tidelift into Sonar's ecosystem will enhance software supply chain security by leveraging human-verified insights from maintainers of popular open source libraries. Developers can expect comprehensive tools to address vulnerabilities in first-party, AI-generated, and third-party code.

$230 Million Acquisition of Qwak Enhances Model Deployment and Security FeaturesJFrog's acquisition of Qwak will integrate advanced MLOps capabilities into the company's existing DevSecOps platforms. The transaction aims to improve model deployment efficiency, enhance security measures and integrate AI development features for end-to-end offerings.