Alice, formerly ActiveFence, has successfully raised $140 million in new funding, bringing its total investment to $280 million. The company plans to use these funds to enhance its defenses for AI models and bolster its enterprise security solutions.

Alice, formerly known as ActiveFence, has announced a significant new funding round, securing $140 million. This latest investment brings the company's total funding to $280 million. The stated purpose of these funds is to strengthen Alice's capabilities in defending AI models and to enhance its existing enterprise security offerings.
The focus on AI model defense highlights an emerging area of cybersecurity concern. As artificial intelligence systems become more integrated into critical business operations, protecting the integrity and functionality of these models is paramount. This can involve defending against various forms of adversarial attacks, such as data poisoning, model inversion, or evasion attacks, where malicious actors attempt to manipulate training data, extract sensitive information from a model, or craft inputs that cause a model to misclassify or behave unexpectedly.
Enterprise security solutions, the other area slated for enhancement, typically encompass a broad range of technologies and services designed to protect an organization's entire digital infrastructure. This includes safeguarding networks, endpoints, applications, and data from unauthorized access, use, disclosure, disruption, modification, or destruction. Common components of enterprise security platforms include threat detection and response, identity and access management, data loss prevention, and vulnerability management.
The substantial investment suggests a growing market demand for specialized security solutions tailored to the unique challenges presented by AI. Traditional security paradigms often struggle to adequately address the complex and often opaque nature of AI models, making dedicated defenses increasingly necessary. This trend is driven by the widespread adoption of AI across various industries, from finance and healthcare to manufacturing and critical infrastructure.
Companies operating in the AI space, particularly those developing or deploying large language models or other sophisticated AI systems, are increasingly seeking robust protections. The potential impact of a compromised AI model can range from financial losses and reputational damage to critical operational failures or the propagation of misinformation. Therefore, investing in advanced defensive measures is becoming a strategic imperative for organizations leveraging AI.
Typical mitigation guidance for AI model vulnerabilities often includes rigorous validation of training data, implementing robust input sanitization and validation, employing adversarial training techniques to harden models against attacks, and continuous monitoring of model performance for anomalous behavior. For broader enterprise security, standard recommendations involve multi-factor authentication, regular security audits, employee training, and maintaining up-to-date security patches and configurations across all systems.
This significant funding round for Alice underscores the increasing recognition within the cybersecurity industry of the critical need to secure artificial intelligence technologies. As AI continues to evolve and permeate various sectors, the development and deployment of specialized security measures to protect these advanced systems will likely remain a high priority for both vendors and enterprises alike, reflecting a broader industry trend towards proactive and adaptive security strategies.
A weakness has been identified in Tenda CP3 27.5.57.101. This issue affects some unknown processing of the file Net/NetCheckPing.cpp. This manipulation of the argument interface_name/host causes os command injection. The attack can be initiated remotely.
A security flaw has been discovered in Tenda CP3 27.5.57.101. This vulnerability affects the function SystemAsh of the file Apis/system.c of the component Kylin. The manipulation of the argument AlarmVoiceURL results in os command injection. It is possible to launch the attack remotely.

OpenAI has announced a $1 billion commitment to provide subsidized access to its Daybreak AI cybersecurity tools for under-resourced critical infrastructure defenders. The initiative, named Daybreak for Frontline Defenders, will offer AI models, training, and technical support over the next six months, prioritizing water and wastewater utilities, electric grid operators, and local government entities. This move aims to equip organizations with limited budgets and staff against increasingly sophisticated cyber threats.

Attackers are exploiting a new unpatched vulnerability in Magento Open Source and Adobe Commerce that lets them run malicious code on an online store's server without logging in, Dutch e-commerce security company Sansec said in an advisory published on September 5. Sansec, which discovered the flaw and named it StyleSmuggler, said attacks started on September 4. "Sansec is publishing early
In BPF instructions that load/store a value from/to a scratch memory register the register index is an unsigned 32-bit integer and must not exceed 15, but libpcap BPF interpreter does not validate the value. In particular uncommon use cases a crafted filter program can cause the interpreter to try reading and writing the OS process memory in the 16GiB starting at the current stack frame on 64-bit architectures and in the entire address space on 32-bit architectures.

Attackers are exploiting two new PaperCut flaws to steal credentials and gain privileged access in education-sector attacks across the U.S. and Europe. Attackers are exploiting two recelty disclosed PaperCut flaws, CVE-2026-81578 and CVE-2026-82078, in attacks targeting schools and other education organizations in the U.S. and Europe, as reported by TheHackerNews. Arctic Wolf researchers observed