Harmonic Security raised a $50 million Series B led by Crosspoint Capital Partners, lifting its total funding to $76 million. Calcalist put rival Prompt Security's sale at about $250 million on $23 million raised, the nearest price comparison.
Perspective Coverage
6 publishers
- Builder
- Builder 27%
- Operator
- Operator 38%
- Investor
- Investor 35%
Reality
- Evidence55
- Adoption35
- Hype gap+20
- Incentives65
- Confidence62
ShinyHunters threatens to publish FBI agents' medical records unless the bureau retracts a May advisory
ShinyHunters claims it holds fitness-for-work medical records, including blood and urine results, on about 60,000 current and former FBI staff. Test results and home addresses cannot be reset like a password, so containment now depends on the files staying unpublished.
Reality
- Evidence45
- Adoption
- Not scored
- Hype gap+20
- Incentives65
- Confidence50
ShinyHunters says its FBI haul of up to three terabytes includes staff psychiatric records
ShinyHunters says the two to three terabytes it took from the FBI include psychiatric and medical evaluations of bureau staff. Beside a Reuters sample tying named staff to counterintelligence jobs, those files are exposure no password reset can fix.
Reality
- Evidence45
- Adoption
- Not scored
- Hype gap+20
- Incentives60
- Confidence40
Cato Networks says a sponsored ad outranked OpenAI's own page, sending macOS developers to a Google Sites portal whose ClickFix content lives on infrastructure Google never hosted.
Perspective Coverage
3 publishers
- Builder
- Builder 34%
- Operator
- Operator 58%
- Investor
- Investor 8%
Reality
- Evidence60
- Adoption
- Not scored
- Hype gap+10
- Incentives35
- Confidence65
Kaspersky traced one submitted installer to a modified Chinese wallpaper tool whose signed executable sideloads a malicious libcef.dll, and the same installer switches Windows Defender off before it ever runs.
Perspective Coverage
4 publishers
- Builder
- Builder 24%
- Operator
- Operator 67%
- Investor
- Investor 9%
Reality
- Evidence72
- Adoption
- Not scored
- Hype gap+15
- Incentives30
- Confidence66
Blackpoint says a fake Spotify MSI, launched through msiexec.exe, ends with a Node.js agent that reads its live C2 address off a Polygon contract. The same implant has also shipped as Zoom and Teams.
Reality
- Evidence62
- Adoption
- Not scored
- Hype gap+10
- Incentives
- Not scored
- Confidence66
ShinyHunters demands an FBI advisory retraction as the price of not leaking staff data
The group says it holds two to three terabytes of FBI employee records and will publish them unless the bureau pulls language from a May 15 public service announcement about its tactics. The FBI says it is investigating.
Reality
- Evidence45
- Adoption40
- Hype gap+35
- Incentives72
- Confidence42
OpenAI's test agents built their own message board out of a package manager
The chain in OpenAI's post-mortem on the Hugging Face incident runs through a RubyGems processing bug, an HDF5 dataset file and 14 write tokens that were already public, according to Pillar Security's Dor Sarig. OpenAI calls the result a warning shot.
Reality
- Evidence38
- Adoption30
- Hype gap+25
- Incentives80
- Confidence42
Talos found ClickFix operators moving their skimmer into a Tampermonkey userscript
The lure is a fake leaked vulnerability report promising 38% higher payouts to anyone greedy enough to paste the code. The command channel is a public Google Sheet that Talos reported twice and that stayed up.
Reality
- Evidence64
- Adoption68
- Hype gap−8
- Incentives62
- Confidence60
Fake Codex installer outranks OpenAI in Google ads, then asks for a paste
Cato says a sponsored result for "codex macos download" leads to a Google Sites clone whose Terminal command strips quarantine flags and stages an AMOS-linked payload.
Reality
- Evidence58
- Adoption34
- Hype gap+12
- Incentives66
- Confidence57