Harmonic Security raised a $50 million Series B led by Crosspoint Capital Partners, lifting its total funding to $76 million. Calcalist put rival Prompt Security's sale at about $250 million on $23 million raised, the nearest price comparison.
Perspective Coverage
4 publishers
- Builder
- Builder 21%
- Operator
- Operator 35%
- Investor
- Investor 44%
Reality
- Evidence62
- Adoption40
- Hype gap+15
- Incentives60
- Confidence68
ShinyHunters claims it holds fitness-for-work medical records, including blood and urine results, on about 60,000 current and former FBI staff. Test results and home addresses cannot be reset like a password, so containment now depends on the files staying unpublished.
Reality
- Evidence45
- Adoption
- Insufficient
- Hype gap+20
- Incentives65
- Confidence50
ShinyHunters says the two to three terabytes it took from the FBI include psychiatric and medical evaluations of bureau staff. Beside a Reuters sample tying named staff to counterintelligence jobs, those files are exposure no password reset can fix.
Reality
- Evidence45
- Adoption
- Insufficient
- Hype gap+20
- Incentives60
- Confidence40
Cato Networks says a sponsored ad outranked OpenAI's own page, sending macOS developers to a Google Sites portal whose ClickFix content lives on infrastructure Google never hosted.
Perspective Coverage
3 publishers
- Builder
- Builder 34%
- Operator
- Operator 58%
- Investor
- Investor 8%
Reality
- Evidence60
- Adoption
- Insufficient
- Hype gap+10
- Incentives35
- Confidence65
Kaspersky traced one submitted installer to a modified Chinese wallpaper tool whose signed executable sideloads a malicious libcef.dll, and the same installer switches Windows Defender off before it ever runs.
Perspective Coverage
4 publishers
- Builder
- Builder 24%
- Operator
- Operator 67%
- Investor
- Investor 9%
Reality
- Evidence72
- Adoption
- Insufficient
- Hype gap+15
- Incentives30
- Confidence66
Blackpoint says a fake Spotify MSI, launched through msiexec.exe, ends with a Node.js agent that reads its live C2 address off a Polygon contract. The same implant has also shipped as Zoom and Teams.
Reality
- Evidence62
- Adoption
- Insufficient
- Hype gap+10
- Incentives
- Insufficient
- Confidence66
The group says it holds two to three terabytes of FBI employee records and will publish them unless the bureau pulls language from a May 15 public service announcement about its tactics. The FBI says it is investigating.
Reality
- Evidence45
- Adoption40
- Hype gap+35
- Incentives72
- Confidence42
The chain in OpenAI's post-mortem on the Hugging Face incident runs through a RubyGems processing bug, an HDF5 dataset file and 14 write tokens that were already public, according to Pillar Security's Dor Sarig. OpenAI calls the result a warning shot.
Reality
- Evidence38
- Adoption30
- Hype gap+25
- Incentives80
- Confidence42
The lure is a fake leaked vulnerability report promising 38% higher payouts to anyone greedy enough to paste the code. The command channel is a public Google Sheet that Talos reported twice and that stayed up.
Reality
- Evidence64
- Adoption68
- Hype gap−8
- Incentives62
- Confidence60
Cato says a sponsored result for "codex macos download" leads to a Google Sites clone whose Terminal command strips quarantine flags and stages an AMOS-linked payload.
Reality
- Evidence58
- Adoption34
- Hype gap+12
- Incentives66
- Confidence57