Cybersecurity Roundup: AI Logging Guide, 200+ Vulnerabilities Found, and Security Industry Moves
Summary
The roundup covers a free guide to AI-tool logging, Wiz’s claim that its Atlas system found over 200 vulnerabilities, a lawsuit alleging an MCP gateway clone, and developments in agent identity, data security, and SecOps.
Key points
- A free 78-page guide maps what eight AI tools log, what telemetry they miss, and what defenders may be able to detect.
- Wiz says its Atlas multi-agent researcher found more than 200 previously unknown vulnerabilities across Kubernetes, Linux, and other projects; the article notes that its CyberGym score measures exploit reproduction, not discovery.
- Runlayer sued Rippling, alleging trade-secret theft and contract breaches related to an MCP gateway; Rippling denied using Runlayer intellectual property, and the allegations remain unproven.
- Block’s open-source Buzz gives agents separate cryptographic identities and signed audit trails, though signatures do not establish that an action was safe or authorized.
- Cyera signed a reported $1 billion letter of intent to acquire Oasis Security, combining data-security capabilities with non-human identity governance.
- Other announcements include tools and funding focused on agent access controls, federated security operations, cloud attack paths, data lineage, and AI-generated phishing.
Article Details
- Event Type
- Weekly cybersecurity industry news covering security product launches, vulnerability research, a trade-secret lawsuit, and a proposed acquisition.
- Impact
- Wiz says its Atlas system found more than 200 previously unknown vulnerabilities across Kubernetes, the Linux kernel, containerd, gVisor, grpc, and dnsmasq. Runlayer sued Rippling, alleging trade-secret theft, unfair competition, and breach of contract; Rippling denied using Runlayer IP, and the claims have not been proven. Cyera signed a letter of intent to acquire Oasis Security in a deal reportedly valued at roughly $1 billion.
People
Andrew BermanRunlayer CEO, whom an alleged Rippling insider reportedly told that an internal team was building an almost one-to-one copy of Runlayer.Curtis RedgateCredited with kicking off the Claude Code telemetry work for the AI tooling visibility guide.Cy KhormaeeFormer Google security leader and co-founder of AegisAI.Darwin SalazarAuthor of The Cybersecurity Pulse newsletter.Kenneth KayeContributed to the AI tooling visibility guide.Matt JaneCredited with kicking off the Claude Code telemetry work for the AI tooling visibility guide.Ryan LuoFormer Google security leader and co-founder of AegisAI.Valerie WormanContributed to the AI tooling visibility guide.
Vendors
7AI7AI launches a federated SIEM as the SecOps stack convergesAct SecurityAct Security exits stealth with $60M to shrink cloud attack pathsAegisAIAegisAI raises $36M to fight AI-generated spear phishingBlock🐝 Every agent gets a keypair: Block’s open-source Buzz gives agents distinct identities and signed audit trails.CyberhavenCyberhaven Flow follows data through human and agent workflowsCyera🧬 Cyera to acquire Oasis for $1B: Cyera signed an LOI to acquire Oasis in a reported billion-dollar deal.FigFig brings CI/CD mechanics to detection engineeringGoogle🏷️ Google resets the alias map: Google unified its naming systems and gave everyone another alias map to maintain.Hush SecurityHush Security raised a $30 million Series A, with Akamai joining existing investors Battery Ventures and YL Ventures.Oasis SecurityCyera signed a letter of intent to acquire Oasis Security in a deal reportedly valued at roughly $1 billion. Cyera maps sensitive data and who can reach it. Oasis inventories non-human identities, including serviceRippling🥊 MCP trial becomes lawsuit: Runlayer alleges Rippling cloned its gateway after a nearly year-long enterprise trial.Runlayer🥊 MCP trial becomes lawsuit: Runlayer alleges Rippling cloned its gateway after a nearly year-long enterprise trial.SaviyntSaviynt brings runtime authorization to AI identitiesWiz🧪 Wiz builds an autonomous researcher: Atlas uncovered 200+ unknown flaws and autonomously proved each was exploitable.
Products
7AI BuildSIEMs, data lakes, and cloud platforms without forcing customers through a migration. It also launched 7AI Build, a way for customers and partners to package their own techniques into workflows and services.Atlas🧪 Wiz builds an autonomous researcher: Atlas uncovered 200+ unknown flaws and autonomously proved each was exploitable.Buzz🐝 Every agent gets a keypair: Block’s open-source Buzz gives agents distinct identities and signed audit trails.FlowCyberhaven Flow follows data through human and agent workflowsVanguardIt is also pushing Vanguard, a threat-hunting agent that looks beyond the inbox.ZumaSaviynt is pushing agent governance into the runtime with Zuma.