Mave
Mave, a cybersecurity startup that uses agents to counter the rise in AI-powered cyberattacks, has raised $34 million in funding.
The Israel-based startup says its AI agents pull together information from a company's existing security systems, investigate alerts, filter out false alarms, and take actions approved by human teams.
"Security operations is the last gate in any organization," cofounder and CEO Raziel Oren said, comparing it to the physical security guards who monitor a building's live camera footage. "This thing is really broken from the inside. The roots of the solutions there are just not keeping the relevant pace with the emerging threats."
AI has transformed cyber threats at a dizzying pace. Attacks can happen much faster and on a much larger scale, and Oren predicted that the increase in agent-powered incidents will be "exponential."
Mave says its own agents help human security teams keep up. "You can't hire your way out of this," Oren told Business Insider. "There must be a change in how you do [security operations] in order to protect your organizations."
Oren cofounded Mave with Guy Eshel in 2025 after years of friendship. The two met when Oren was Eshel's mentor in unit 8200 of the Israel Defense Forces, which sits under the intelligence corps and gave them firsthand experience with cybersecurity issues.
AI agents have come under the spotlight after a string of high-profile security breaches. Corporate leaders have grown increasingly worried about the cybersecurity risks AI poses, and some of Wall Street's executives spent third-quarter earnings calls explaining how they're defending against rogue AI agents.
The technology has also been used by researchers to uncover security flaws: this week, OpenAI said one of its AI models had helped identify a vulnerability that puts 70% of the world's websites at risk.
Oren said it takes some customers time to become comfortable handing over security operations to agents, but that the product's transparency is key to building trust. Mave says its agents track each step of their thousands of workflows, giving human employees insight into the agents' reasoning and actions.
Mave charges its customers a flat rate, depending on the company's size and needs. Other startups have also jumped at the opportunity Mave sees, including agentic cybersecurity companies Dropzone and Prophet Security.
Mave's $34 million funding consists of $28 million from a recent Series A round, led by Red Dot Capital Partners and with participation from Lumir Growth Partners, and an earlier $6 million seed round.
The startup currently has 30 employees and plans to use some of the fresh capital to continue expanding the team, mainly for go-to-market roles and AI research.
Read the pitch deck Mave used to raise its Series A round:
Mave
Mave
Mave
Mave
Mave
Companies and governments around the world raced on Thursday to patch critical vulnerabilities in the widely used PHP programming language, as millions of hacking attempts were reported and authorities across Asia activated emergency cybersecurity measures.
The rush came after government websites in Europe and elsewhere went offline on Wednesday, with the disclosure of the flaws sending website operators scrambling to protect their systems.
PHP developers released urgent security fixes on Wednesday after vulnerabilities that had remained in the software for years were uncovered using artificial intelligence. The developers urged all users to update immediately.
Cloudflare Chief Executive Matthew Prince said attempts to exploit the vulnerabilities had surged dramatically following their public disclosure.
“In the 10 hours before it was publicly announced, across the network we saw thousands of attempts to exploit it,” Prince said in a post on social media platform X late on Wednesday.
“That jumped to tens of thousands in the 45 minutes post announcement, hundreds of thousands within 2 hours, and millions now.”
The vulnerabilities could allow attackers to execute malicious commands without authentication, steal sensitive information or take websites offline, according to South Korea’s science ministry.
South Korea raised its private-sector cybersecurity alert level on Thursday and activated emergency response measures, citing the increased risk of hacking attacks.
The presidential National Security Office convened an emergency meeting involving intelligence, defence and science ministry officials to coordinate responses across the public, private and military sectors.
The science ministry said it had issued security guidance to approximately 28,000 companies with registered chief information security officers and 5,900 members of a government information-sharing network.
Operators of critical infrastructure, web-hosting companies and data centres were also alerted.
Authorities urged organisations to install the latest PHP security updates and introduce temporary safeguards where immediate patching was not possible.
China’s industry ministry similarly called on organisations and users to inspect their systems immediately and upgrade to the latest secure version of PHP.
It also recommended strengthening cybersecurity monitoring and promptly changing accounts, passwords and security keys.
In Japan, Mitsubishi UFJ Financial Group said on Thursday it was temporarily suspending some internet services as part of emergency security measures.
Japan’s Finance Ministry also suspended some website content and online services while implementing protective measures.
Prime Minister Sanae Takaichi urged website operators on Wednesday to check whether their systems used PHP and prepare to install the security fixes.
The disruptions and emergency measures highlight the potential impact of vulnerabilities in PHP, a programming language widely used to power websites and online services.
The disclosure of the flaws, followed by the rapid escalation in attempted exploitation, has prompted governments and businesses to accelerate security updates to protect their systems from possible attacks.
The Council of the European Union adopted its negotiating position on Wednesday, 21st October, clearing the way for negotiations with the European Parliament once MEPs establish their position.
The measures form part of the European Commission’s Digital Omnibus package, introduced in November 2025, and represent one of Brussels’ most substantial attempts to simplify the regulatory obligations imposed on businesses operating across the single market.
The proposed reforms would modify several provisions of the GDPR, which has governed the processing of personal data across the EU since May 2018.
Rather than replacing the legislation, the Council wants to clarify existing obligations, particularly those concerning pseudonymised information, requests for access to personal data and the use of information in scientific research.
The agreed position retains the existing definition of personal data while introducing provisions intended to clarify when pseudonymised information can be linked to an identifiable individual.
Companies would also benefit from simplified procedures for handling manifestly unfounded or excessive data requests and from reduced information requirements in certain low-risk circumstances.
Another proposed change would extend the deadline for notifying authorities of personal data breaches, while establishing more consistent reporting templates across the EU.
For multinational companies, which currently navigate different interpretations of data protection obligations by national authorities, these provisions could reduce compliance costs and administrative duplication.
However, the changes have raised concerns among European privacy regulators.
In a joint opinion published in February, the European Data Protection Board and European Data Protection Supervisor warned that parts of the Commission’s original proposal could create legal uncertainty and undermine existing protections.
They were particularly concerned about proposals affecting the definition of personal data and the Commission’s potential role in determining when pseudonymised information falls outside GDPR requirements.
The Council’s decision to retain the existing definition addresses part of that debate, although the final legislative text remains subject to negotiations.
One of the most visible changes would affect the consent notices encountered by Europeans when visiting websites.
Under the Council’s proposal, additional categories of cookies and similar tracking technologies could be used without obtaining explicit consent, provided the relevant legal conditions are satisfied.
The proposed exemptions include technologies necessary to deliver a service, maintain device security or conduct audience measurement.
For website operators, publishers and online businesses, the changes could reduce the number of consent requests displayed to visitors and simplify technical compliance.
The current system has generated extensive legal disputes over whether consent is genuinely voluntary and whether tracking technologies collect information beyond what users have authorised.
EU Today has previously examined the enforcement of these obligations, including a Belgian court ruling concerning the legality of the advertising industry’s consent framework.
The latest proposal would not abolish consent requirements for commercial tracking or behavioural advertising. Technologies falling outside the permitted exemptions would remain subject to the applicable privacy rules.
The package also addresses the growing number of reporting obligations imposed on European businesses under overlapping cybersecurity legislation.
The Commission originally proposed a single European reporting mechanism for certain data and cybersecurity incidents.
Member states have instead agreed to establish national entry points, supported by an EU-level information system and provisions for coordinating cross-border notifications.
The Council’s position would also clarify the legal grounds for certain uses of personal data in artificial intelligence systems and introduce safeguards for processing sensitive information in specified circumstances.
These provisions follow increasingly complicated disputes over the application of European privacy legislation to AI development and automated decision-making.
As EU Today reported in its coverage of a major GDPR enforcement case involving Uber, automated processing already presents substantial compliance risks for companies operating within the bloc.
The Commission estimates that its wider digital simplification initiative could save European businesses up to €5 billion in administrative costs by 2029.
The initiative reflects pressure from European governments and business organisations to reduce the regulatory fragmentation that makes operating across multiple EU jurisdictions more expensive.
The Digital Omnibus is part of a broader legislative programme influenced by the competitiveness reports produced by former Italian prime ministers Enrico Letta and Mario Draghi.
Under the Council’s negotiating mandate, several existing data-related rules would also be consolidated, while provisions governing the protection of trade secrets would be strengthened.
The European Parliament must now determine its negotiating position before formal discussions between the institutions can begin. Until the legislation is agreed and adopted, existing GDPR, cookie consent and cybersecurity requirements remain in force.
Data centers are increasingly under attack in the Ukraine-Russia war, as well as Iran’s wanton drone and missile attacks on neighboring states like Bahrain and the United Arab Emirates (UAE), a study revealed this weekend.
The post Study: Data Centers Become Military Targets in Ukraine, Russia, and Middle East appeared first on Breitbart.
Government websites in Europe and elsewhere went offline on Wednesday after the disclosure of critical vulnerabilities in a widely used programming language sent website operators around the world scrambling to protect their systems.
Developers of the PHP programming language on Wednesday released urgent new fixes to vulnerabilities that had been lurking in their software for years until they were uncovered using AI, saying all users were “encouraged to update immediately.”
With tech firms warning that some hackers were already exploiting the flaws, government agencies across Europe were among those that took sites offline as a precaution.
Because a fix is now public and artificial intelligence tools are able to reverse engineer the bug with little effort, experts said they were bracing for a wave of intrusions as hackers jumped to get ahead of the updates.
AI was powering a “race to exploit,” said Costin Raiu, co-founder of cybersecurity research and incident response firm TLP:Black. He said the next step was the “mass compromise of every vulnerable web server on the internet.”
PHP — a language that dates back to the early 1990s and initially stood for “Personal Home Page” — underpins huge parts of the public-facing web and is baked into WordPress, Drupal, Joomla and Magento sites, meaning any critical vulnerability potentially has enormous knock-on consequences.
“All servers using any version of PHP released in the last 20 years will be vulnerable,” said Tiffany Farriss, the interim chief executive of the Drupal Association. “This issue impacts the majority of the internet.”
Cybersecurity agencies around the world have urged PHP users to update immediately or take websites offline until patches can be applied.
According to data from Censys, the internet intelligence firm, about 1.5 million out of 2.6 million hosts report running a version of PHP for which there is no fix.
The Dutch cybersecurity agency itself went offline, saying it had done so as a precaution because of the vulnerabilities. The operator of the online encyclopedia Wikipedia also said it had taken down an unspecified number of systems until they could be safely patched, while the Internet Archive, the sprawling online library, said it also briefly went offline to deal with the issue.
Even some world leaders weighed in. The Dutch prime minister said he was closely monitoring the situation. Japanese Prime Minister Sanae Takaichi in a post on X said website owners should “check whether your live site uses PHP and prepare to apply the new fix.”
BUG FOUND WITH AI
The flaw in PHP was discovered using artificial intelligence, two cybersecurity companies said in independent reports. Calif said in a blog post it found the flaws with the help of a large language model on August 1 and had been working on a fix ever since. Alphabet-owned GOOGL.O cybersecurity company Wiz said in a blog post that it too had discovered it with the help of Wiz Atlas, its autonomous AI vulnerability research tool, as well as Google’s Gemini 4 Argon and OpenAI’s GPT-5.6 Sol.
The vulnerabilities remained hidden in the PHP codebase for more than a decade and would have been extraordinarily complicated for a human hacker to take advantage of, Wiz’s post said.
“Pre-AI, this manual work would be difficult to implement and even harder to scale,” it said. “With AI, this is no longer a barrier.” Calif and Wiz said they coordinated with one another and the PHP team and OpenAI on the discovery.
In a statement, the White House said it was made aware of the flaw on Friday.
In a blog post late on Wednesday, Amazon AMZN.O security chief CJ Moses said the tech giant’s security team detected an attempt to exploit the vulnerabilities against one of its decoy “honeypot” systems on October 17, four days before public disclosure.
The attempt on the system came from an anonymous internet address, suggesting the activity was conducted by a threat actor, Moses said, adding it was unclear how the actor learned of the flaws while they were under embargo.
More attempts followed on Wednesday by multiple actors before the embargo lifted. Amazon said it was still unclear whether any of the attempts would have worked against real websites, adding the flaws were “now being broadly exploited in the wild.”
CRITICAL SOFTWARE
PHP is a programming language used to run websites. When a visitor loads a page, a server running PHP assembles the content and sends it to the browser. It is free, open-source software maintained by volunteers.
Its ubiquity — PHP runs roughly 75% of websites whose programming language can be identified, according to web technology tracker W3Techs — has made experts anxious. AI-assisted hacking campaigns, which have proliferated in recent weeks, could wreak havoc on unpatched servers, said Lukasz Olejnik, a visiting senior research fellow at King’s College London.
“The scale is huge, and with AI, exploitation may happen instantly,” Olejnik said.
WordPress.com operator Automattic said users of its hosted solutions and Tumblr were safe from the bug. Risks were higher for small PHP-powered websites run by individuals or organizations with limited technical resources, often on shared hosting services where customers do not directly manage the underlying servers.
MASS OUTAGES
In the Netherlands, several organizations followed the example of the National Cyber Security Centre and took public-facing websites offline, including the Port of Rotterdam, government portal Overheid.nl, the national soccer association KNVB, the websites for the country’s five largest political parties and several hospital websites.
Danish municipal IT company Kombit said it had shut down several services, including the national school communication platform.
Disruption was even more widespread in Finland, where state IT services provider Valtori said government public network services had been taken offline “as a precautionary measure.”
France’s Interior Ministry said it had placed all of its websites into preventive maintenance.
The developers of the widely used PHP programming language said on Wednesday they would release patches for two critical vulnerabilities, as EU cybersecurity officials warned organisations unable to apply the fixes should take affected websites offline.
PHP is used across large parts of the internet, and speculation has circulated over the past day that websites running the software could be exposed to serious cyber intrusions.
“PHP is everywhere. It quietly powers WordPress, Drupal, Joomla, and Magento sites, shared hosting platforms, control panels, and an awful lot of software that doesn’t even advertise that it runs PHP under the hood,” cybersecurity company Huntress said in a blog post.
In a security update, PHP said both vulnerabilities were rated 9.2 on the CVSS v4.0 severity scale and urged users to “upgrade as soon as the release is available”.
It said a patch for both vulnerabilities was scheduled for 1400 GMT on Wednesday.
Dane Knecht, the chief technology officer of Web and cloud security firm Cloudflare NET.N, said that attacks were emerging and Cloudflare was updating its firewall rules as a stopgap measure.
“We are seeing early attacks emerging and are updating mitigations as new vectors show up. This is a STOPGAP only. Patch as soon as PHP releases the update,” he said on X.
The European Union Computer Emergency Response Team (CERT-EU) said on Tuesday in an advisory that the 9.2 rating indicated a risk of unauthenticated remote code execution, a type of flaw that can allow attackers to run malicious code on vulnerable systems without logging in.
CERT-EU urged organisations to prepare for the immediate patching of affected assets and said those unable to do so should consider taking affected sites offline.
The Australian Cyber Security Centre (ACSC) issued similar guidance, urging organisations to identify PHP systems in their environments, prepare to apply patches and monitor applications for signs of malicious activity.
“ACSC is currently not aware of active exploitation related to these vulnerabilities,” the agency said.
Web hosting provider GoDaddy said the flaws could allow attackers to execute code on affected servers over the internet, potentially leading to data theft, website defacement or full system compromise.
Wordfence, a security plugin that protects WordPress websites, said all WordPress sites run on a PHP-installed server. It warned that automatic updates would not apply the fix and advised site owners to find out who is responsible for updating PHP on their sites.
PHP’s security team said details of the vulnerabilities, affected versions and the fixed releases would be published when patches are issued.
CERT-EU and the ACSC said all PHP versions from PHP 5 onward could be affected, although PHP has not disclosed which versions are vulnerable.
In an official statement issued on Monday, 19 October, the company announced that it had filed a formal complaint with Dutch police and was cooperating with national cybersecurity authorities. Although physical supermarkets have remained open, the disruption has affected online shopping, deliveries and some distribution operations.
The company said investigators had so far found no evidence that sensitive information belonging to customers, employees or business partners had been taken. However, its investigation remains open, and the identity and objectives of those responsible have not been publicly established.
The disruption began on 12 October, when Ahold Delhaize detected suspicious activity within its information technology infrastructure.
The group responded by taking a number of systems offline as a precaution, affecting most of its retail brands in Europe and the United States. The consequences varied considerably between businesses, with some experiencing prolonged interruption to digital services while others were able to restore operations more quickly.
Albert Heijn, the Netherlands’ largest supermarket chain, has been particularly affected. Its website and mobile application have returned online, but home grocery deliveries are not expected to resume until Friday, 23 October.
Orders scheduled before that date have been cancelled, while the company continues preparations for a gradual restoration of its online delivery service.
The incident also interrupted some supply and distribution arrangements, resulting in shortages on supermarket shelves in parts of the Netherlands and Belgium.
In Belgium, Delhaize has restored its online shopping operations. Certain promotional and personalised services were still experiencing difficulties, although the parent company confirmed that its Belgian e-commerce business was operational again.
Dutch retailers Etos and Gall & Gall have also restored their websites. Meanwhile, several American supermarket brands owned by Ahold Delhaize have continued to experience service interruptions.
The group said it expected additional online services in the United States to become available over the coming days.
Ahold Delhaize said it notified the Netherlands’ National Cyber Security Centre within 24 hours of detecting the malicious activity.
The company has subsequently provided updates to the authorities and, on Monday, confirmed that a formal police report had been submitted.
Chief executive Frans Muller defended the decision to shut down digital systems, arguing that the investigation had demonstrated the necessity of taking preventive action.
The company has not identified the perpetrators, confirmed whether ransomware was involved or disclosed the technical method used to gain access to its infrastructure.
These distinctions are important because malicious activity does not necessarily establish that information was stolen or that attackers obtained control over every system subsequently taken offline.
The retailer has instead described a controlled restoration process intended to ensure that affected systems can be brought back into operation without exposing the business to further risks.
Ahold Delhaize operates thousands of supermarkets and related retail businesses, including Albert Heijn, Delhaize, Food Lion, Giant Food, Hannaford and Stop & Shop.
Its geographical reach means that a disruption originating within shared corporate infrastructure can affect several national markets, even where individual retail chains maintain separate commercial operations.
The attack comes amid increasing scrutiny of the vulnerability of European food retailers to digital disruption.
Earlier this month, investigators in France began examining cyberattacks against refrigeration control systems used by hundreds of supermarkets.
Those incidents reportedly affected equipment at chains including Carrefour, Intermarché and Monoprix, with some retailers forced to discard products after refrigeration systems malfunctioned.
There is no established connection between the French incidents and the attack affecting Ahold Delhaize.
Nevertheless, both episodes illustrate the dependence of modern retail operations on interconnected digital systems supporting stock management, refrigeration, logistics, payments and customer services.
The consequences of a serious cyber incident can extend beyond the loss of access to websites. Interruptions to inventory systems, warehouse operations or communications with suppliers can affect the availability of physical products.
This creates particular difficulties for food retailers, where delays in transport and storage can result in the loss of perishable goods.
The incident also draws attention to the European Union’s NIS2 cybersecurity framework, which establishes stricter risk-management and incident-reporting obligations for organisations operating in designated sectors.
Food production, processing and distribution are among the activities covered by the directive, although its application to particular companies and operations depends on the relevant legal definitions and national implementing arrangements.
The legislation requires organisations within its scope to establish appropriate cybersecurity protections, address supply-chain risks and notify competent authorities of significant incidents.
Separately, the General Data Protection Regulation establishes notification requirements where personal-data breaches meet the relevant reporting threshold.
Ahold Delhaize’s statement that it has found no evidence of sensitive data being taken does not conclude the technical investigation, but it means that a confirmed theft of personal information should not presently be presented as a fact.
For the company, the immediate challenge remains restoring online services while maintaining normal supermarket operations. The wider commercial consequences, including the cost of the interruption and its effect on sales, have not yet been quantified publicly.
The attack began overnight on 11–12th October, when intruders gained access to remotely managed refrigeration equipment and altered operating settings, causing refrigerators and freezers to overheat.
Stores belonging to several major supermarket chains were affected, including Intermarché, Netto, Coopérative U, Carrefour and Monoprix. Some were forced to discard substantial quantities of fresh and frozen food.
French Finance Minister Roland Lescure confirmed that approximately 700 of the country’s 10,000 supermarkets had been affected, although the severity of the disruption varied between locations.
The Paris prosecutor’s office has opened an investigation into the attack, including the damage caused by destroyed merchandise and reported fires.
The incident has drawn attention to industrial control systems that are routinely connected to the internet but may receive less cybersecurity protection than corporate networks and customer databases.
Investigators have established that refrigeration equipment was targeted through vulnerabilities associated with remote monitoring and control systems.
The French cybersecurity authorities identified compromises involving products supplied by Danish manufacturer Danfoss and American company Copeland.
Some of the affected systems used older equipment that no longer received regular security updates.
According to information released by the companies and cybersecurity specialists, certain industrial controllers had been accessible through public internet connections, creating opportunities for unauthorised access.
Hackers reportedly manipulated defrost cycles and increased temperature settings, preventing equipment from maintaining the cold conditions required to preserve food.
The attack affected approximately 300 Intermarché and Netto stores, while Coopérative U reported disruption at around 80 outlets.
Several retailers managed to contain the damage, but others lost substantial quantities of stock.
The consequences extended beyond malfunctioning equipment. Businesses faced the cost of replacing spoiled food, repairing refrigeration systems and restoring normal operations.
The precise financial damage is still being assessed, although estimates from the retail sector indicate that losses across France could amount to tens of millions of euros.
The incident illustrates the security problems created by the growing use of internet-connected industrial equipment.
Modern refrigeration installations allow contractors and maintenance specialists to monitor temperatures, adjust settings and diagnose faults remotely.
These arrangements can reduce operating costs and improve efficiency, but they also create additional access points that attackers may exploit.
Cybersecurity specialists have identified vulnerabilities in commercial refrigeration platforms manufactured by Danfoss and Copeland.
The manufacturers subsequently addressed identified flaws, although older or unsupported equipment remained a concern.
A critical problem for businesses is that industrial machinery often remains operational for many years after its original software has become obsolete.
Replacing entire refrigeration installations can involve substantial expense and operational disruption, encouraging operators to retain equipment that may no longer meet contemporary cybersecurity standards.
The risks are particularly difficult to manage when responsibility for maintenance, software updates and network security is divided between retailers, equipment suppliers and external contractors.
The attack has renewed scrutiny of France’s implementation of the European Union’s NIS2 Directive, which is intended to strengthen cybersecurity across sectors providing important economic and public services.
The directive establishes common requirements covering risk management, incident reporting, organisational responsibility and protection against cyber threats.
Its scope extends beyond traditional critical infrastructure such as energy, telecommunications and transport to include certain businesses involved in food production, processing and distribution.
EU member states were required to incorporate the directive into national legislation by 17 October 2024.
France was among the countries that received a formal warning from the European Commission in May 2025 over incomplete implementation.
French cybersecurity specialists have since warned that delays have complicated efforts to establish consistent obligations for organisations operating industrial and commercial systems.
However, NIS2 does not automatically cover every supermarket. Its application depends on the nature and size of an organisation and the provisions of national implementing legislation.
The incident therefore raises questions not only about the pace of legislative implementation but also about the practical protection of equipment already in use.
The disruption demonstrates how a cyberattack can cause physical damage without directly targeting a conventional industrial facility.
Unlike breaches intended to steal customer information, the French incident interfered with machinery responsible for preserving essential products.
The distinction is important for European policymakers, who increasingly face threats to infrastructure that combines digital controls with physical operations.
The European Union’s cybersecurity agency ENISA has organised cross-border exercises to test how authorities and companies would respond to disruption affecting essential services.
The attack itself has been established, but responsibility for it has not been publicly attributed.
French authorities have said there is no immediate threat to national food supplies. Nevertheless, the destruction of merchandise and interruption of ordinary retail operations have demonstrated the potential economic consequences of weaknesses in relatively commonplace equipment.
The continuing investigation must establish how access was obtained, which systems were compromised and whether the vulnerabilities were known to operators before the attack.
For Brussels and national regulators, the case provides a practical test of whether European cybersecurity legislation can translate into effective protection for the connected equipment on which ordinary commercial activities increasingly depend.
Tasos Katopodis/Getty Images for Semafor World Economy
Corporate leaders tend to be enthusiastic about AI's potential — and increasingly concerned about the cybersecurity challenges the technology brings.
Tim Walsh, CEO and chair of KPMG US, said the worries come up in nearly every meeting he has with fellow leaders, as AI gives bad actors new ways to try to breach corporate defenses.
"The cyber risks have just elevated to places that we've never seen them before," he told Business Insider.
Walsh pointed to the Hugging Face incident this past summer, in which OpenAI said an AI agent bypassed controls during an internal cybersecurity evaluation and accessed parts of the open-source AI platform's systems.
There isn't currently a defensive wall, he said, that's capable of rebuffing every cyber threat. He said KPMG is working with the frontier AI model developers and others on further protections.
The goal is to help the Big Four firm protect its business, and its clients' businesses, Walsh said, adding that he sees it as a potential opportunity worth more than $1 billion.
Unease about AI and cyber threats showed up in a recent KPMG US survey of 400 CEOs at major US companies. While leaders reported confidence in AI's potential, cybersecurity was the concern they identified most often.
Eighty-five percent said cybercrime and "cyber insecurity" could affect their company's prosperity over the next three years — more than said the same about inflation, geopolitical tensions, the pace of technological change, or other risks.
Cybersecurity was also the most commonly cited challenge to implementing AI. It topped ethical questions, data readiness, cost management, and translating AI spending into measurable returns.
Leaders said they were particularly concerned about identity theft and data privacy, vulnerability to cyberattacks, and fraud detection and prevention. Nearly half said they planned to increase cybersecurity investment over the next three years, citing threats including AI-powered social engineering, AI-assisted phishing or malware, and data and privacy risks tied to AI agents.
The concern is shaping the kinds of work the firm wants to do for clients.
Walsh said KPMG is building what he described as a managed cyber-defense business centered on AI, meant to serve as a "shield and defense mechanism" for companies. KPMG already has a cybersecurity business, he said, though this would be a different offering built around AI.
The company also sees a growing need to check whether the AI systems organizations deploy are doing what they are supposed to do. KPMG already helps clients assess AI-related controls and governance. Walsh said the firm is developing additional services to verify that AI agents are operating as intended and give investors and others confidence that companies can control them.
"Trust around AI is a real thing," he said.
The White House’s artificial intelligence task force adopted its charter Thursday, opening a 120-day window to advise on how much of an oversight role Washington should take.
The post White House AI Task Force Adopts Charter, Starts 120-Day Clock appeared first on Breitbart.
Login