Sun'iy Intellekt
Northstar Security Stealth Rejimidan $7 Million Bilan Chiqdi — Toksik Xavf Kombinatsiyalarini Fosh Etish Uchun
Startap identifikatsiyalar, aktivlar va zaifliklar qanday bog'lanishini xaritalaydi va xavfli muammolar kombinatsiyalarini topish va tuzatish uchun AI agentlaridan foydalanadi.
Muallif
SecurityWeek News
| 1-noyabr, 2026 (ET bo'yicha 7:15)
Xavfsizlik jamoalari uchun AI agentlarini ishlab chiqayotgan startap — Northstar Security — stealth rejimidan $7 millionlik seed moliyalashtirish bilan chiqdi.
Wing Venture Capital raundni boshqardi. MVP, Outliers va kiberxavfsizlik sohasidagi tajribali mutaxassislar — Gerhard Eschelbeck, Renaud Deraison va Justin Somaini ham sarmoya kiritdi.
Kompaniya mavjud xavfsizlik va IT vositalaridan ma'lumotlarni yig'ib, o'zi "Xavfsizlik Kontekst Grafigi" deb ataydigan tizimni quradi. Real vaqtda yangilanadigan grafik identifikatsiyalar, aktivlar, ilovalar, zaifliklar va biznes tizimlari bir-biri bilan qanday bog'lanishini ko'rsatadi.
Northstar "toksik kombinatsiyalar" deb ataladigan holatlarni ushlashni maqsad qiladi. Zaiflik, boshqarilmaydigan qurilma yoki haddan tashqari imtiyozlarga ega hisob kabi muammolar alohida nazorat ostida bo'lishi mumkin, ammo birgalikda ular muhim biznes tizimlarini ochib qo'yishi mumkin.
Masalan, platforma endpoint himoyasi yo'q noutbukni aniqlashi mumkin — uning egasi esa muhim ish haqi tizimiga kirish huquqiga ega imtiyozli foydalanuvchi.
Tahlilchilar bunday topilmalarni oddiy tilda savollar berish orqali tekshirishlari mumkin. Northstar agentlari keyin tuzatish ishlarini boshlashi mumkin — masalan, endpoint himoyasini o'rnatish, foydalanuvchini xabardor qilish yoki uning kirish huquqini cheklash — va odamlar bu harakatlarni kerakli joyda nazorat qilishlari mumkin.
Reklama. O'qishni davom ettirish uchun pastga aylantiring.
Mijozlar tashqi AI agentlariga Model Context Protocol (MCP) orqali grafikga kirish huquqini berishlari va o'zlarining xavfsizlik ish oqimlarini qurishlari mumkin. Northstar 70 dan ortiq korporativ xavfsizlik va IT mahsulotlari bilan bog'lanishini aytadi — jumladan Okta, GitHub, Workday, Microsoft Defender va Entra, AWS va Google Cloud.
"Xavfsizlik jamoalari ma'lumotga to'lib ketgan, ammo kontekstga och qolgan," dedi Northstar bosh direktori va hammuassisi Amer Deeba.
Deeba Normalyze kompaniyasini hammuassislik qilgan — keyinchalik Proofpoint tomonidan sotib olingan — va avval Qualys'da yuqori darajali rahbar bo'lgan. Uning hammuassisi, CTO Ed Rowe Farmers Business Network'da xuddi shu lavozimda ishlagan va AppDynamics'da SVP sifatida muhandislikni boshqargan.
Startap mablag'ni platformani rivojlantirish, xodimlar yollash va bozorga kirish harakatlarini kengaytirish uchun ishlatadi.
Bog'liq: Infisical Maxfiylik Boshqaruvi Firmasi $40 Millionlik Moliyalashtirishdan So'ng $600 Million Qiymatga Ega Bo'ldi
Bog'liq: Sobiq Unit 8200 Ofitserlari Agentic SecOps Startapi Mave Uchun $34 Million Yig'di
Bog'liq: Indurex Sanoat Kiberxavfsizlik Platformasini Kengaytirish Uchun $8 Million Yig'di
Yozgan: SecurityWeek News
Kundalik Axborot Byulleteni
So'nggi kiberxavfsizlik tahdidlari, tendentsiyalar va mutaxassis fikrlari haqida xabardor bo'lish uchun SecurityWeek Email Byulleteniga obuna bo'ling.
Biznes Email*
emailsignupsource
Qo'shimcha ma'lumot uchun Maxfiylik Siyosatimizni o'qing.
SecurityWeek News'dan Ko'proq
- Infisical Maxfiylik Boshqaruvi Firmasi $40 Millionlik Moliyalashtirishdan So'ng $600 Million Qiymatga Ega Bo'ldi
- Boshqa Yangiliklarda: Tor Chiqish Releylari O'g'irlandi, Banklar Yovuz AI Agentlarini Aniqladi, O'zini Tiklaydigan macOS Ransomware
- Asymptote Labs AI Agent Ishlash Xavfsizligi Uchun $5.5 Million Seed Yig'di
- Boshqa Yangiliklarda: ICS-Sniper Hujumi, XWorm Zararli Dastur Operatorlarini Buzish, $250k Chrome Zaifligi
- Hozir Tomosha Qiling: Zero Trust Strategiyalari Sammiti — Barcha Sessiyalar Talab Bo'yicha Mavjud
- IonQ Zero Trust Firmasi Elisity'ni $1.3 Milliardgacha Sotib Oladi
- Boshqa Yangiliklarda: Koreya Bank Buzilishlarida AI Ishlatildi, She'r Boshqariladigan Botnet, Empire Admin 40 Yil Oldi
- Boshqa Yangiliklarda: $15K iCloud Soxtalashtirish Xatolari, AI Siyosat Mutaxassislari Fishing Hujumiga Uchragan, Adblocker AI Chatlarini Kuzatadi
So'nggi Yangiliklar
- Suriyalik Xaker AQShda O'n Yildan Ortiq Qochqinlikdan So'ng Qamoqqa Tushdi
- PHP2Shell Hujumlari Palo Alto Firewall'larini Ildizdan Buzdi, Ammo WordPress'ga Qarshi Muvaffaqiyatsiz Bo'ldi
- Boshqa Yangiliklarda: Anthropic Buzilish Bahsi, UEFI Zaifligi Ko'pchilik Serverlarga Ta'sir Qildi, Cloudflare AI Ma'lumot Sizishi
- Passkeys Parollardan Yaxshiroq. Ammo Ular Yetarli Emas.
- Bulletproof Host Virtualine O'z Domenini FBI Musodarasiga Yo'qotdi
- Yangi WordPress Zaifligi Hujumchilarning Diqqat Markazida
- Drupal Commerce Core Zaifligi Onlayn Do'konlarga Qarshi Ishlatildi
- Polymarket Savdogarlaridan $2 Milliondan Ortiq Yangi Ta'minot Zanjiri Hujumida O'g'irlandi
Trendda
$6 Milliard Binance Hack Shimoliy Koreyaning TraderTraitor Belgilarini Ko'rsatadi
Oracle Health Ma'lumot Buzilishi Deyarli 20 Millionga Yetdi
PHP2Shell Hujumlari Palo Alto Firewall'larini Ildizdan Buzdi, Ammo WordPress'ga Qarshi Muvaffaqiyatsiz Bo'ldi
Cisco SD-WAN Zero-Day Zaifligi Volt Typhoon'ning "Jim Poyezd" Tarmog'iga Bog'liq
Polymarket Savdogarlaridan $2 Milliondan Ortiq Yangi Ta'minot Zanjiri Hujumida O'g'irlandi
Yangi WordPress Zaifligi Hujumchilarning Diqqat Markazida
Boshqa Yangiliklarda: Anthropic Buzilish Bahsi, UEFI Zaifligi Ko'pchilik Serverlarga Ta'sir Qildi, Cloudflare AI Ma'lumot Sizishi
Node2Shell: Brotli Zaifligi Microsoft, Node.js, Python Paketlarida Patchlashni Keltirib Chiqardi
Kundalik Axborot Byulleteni
So'nggi tahdidlar, tendentsiyalar va texnologiya haqida xabardor bo'lish, shuningdek, soha mutaxassislarining chuqur fikrlarini olish uchun SecurityWeek Email Byulleteniga obuna bo'ling.
Biznes Email*
emailsignupsource
Qo'shimcha ma'lumot uchun Maxfiylik Siyosatimizni o'qing.
Vebinar: Agentic Pentesting Kuchliroq CTEM Dasturi Uchun
4-noyabr, 2026
Pentestlar orasidagi xavfsizlik bo'shliqlarini yoping. Ushbu sessiyaga qo'shiling va agentic pentestingni o'rganing hamda CTEM dasturingizda uzluksiz ta'sirni tekshirish uchun amaliy asosga ega bo'ling.
Ro'yxatdan O'ting
Virtual Tadbir: CISO Forum 2026 Sammiti
10 va 11-noyabr, 2026
CISO'lar, yuqori darajali kiberxavfsizlik rahbarlari, amaliyotchilar, soha mutaxassislari va boshqa xavfsizlik rahbarlarini birlashtiramiz — amaliy tajriba almashish va korporativ kiberxavfsizlik strategiyasini shakllantirayotgan masalalarni ko'rib chiqish uchun.
Ro'yxatdan O'ting
Harakatdagi Odamlar
Barracuda Dan Fletcher'ni CFO sifatida tayinladi.
Artemis Security Arun Singh'ni CGO sifatida tayinladi.
General Paul M. Nakasone Armadin Kengashiga qo'shildi.
Harakatdagi Ko'proq Odamlar
Mutaxassis Fikrlari
Passkeys Parollardan Yaxshiroq. Ammo Ular Yetarli Emas.
Tashkilotlar parollarni yo'q qilganda, hujumchilar moslashadi. Autentifikatorga to'g'ridan-to'g'ri hujum qilish o'rniga, ular uning atrofidagi imkoniyatlarni qidiradi. (Torsten George)
Xavf Shaxsiy Bo'lganda: Xavfsizlik Rahbarlari Saraton Tashxisidan Nima O'rganishi Mumkin
Xavf menejerlari zaif signallarni aniqlash, buzilishlarga tayyorgarlik ko'rish va noaniqlik ostida qiyin qarorlar qabul qilishga o'rgatilgan. Ammo bu intizom tizim yoki korxona emas, balki siz bo'lganda boshqacha ko'rinadi. (Steve Durbin)
Hech Kim Xavfsizlik So'rovnomasiga Ishonmaydi. Shunga Qaramay, Biz Unga Tayanamiz.
Deyarli har bir B2B bitimni nazorat qiladigan jarayon — yuboruvchining o'zi ishonmaydigan va qabul qiluvchining qabul qiladigan o'z-o'zini baholash. Nihoyat, kompaniyalar o'rtasida ishonch uchun yaxshiroq asos paydo bo'ldi. (Sravish Sridhar)
Bu Normal: NetScaler Zero-Day'lari Yangi Normal Haqida Nima Aytadi
Agar Citrix NetScaler patchlari tez orada chiqarilsa, patch boshqaruv quvurlarini tayyor saqlang. (Tod Beardsley)
AI Dasturiy Ta'minot Xavfsizligining Kaliti Tezlik Emas, Balki Yetuklik
Sizning dasturchilaringiz AI qabul qilish shkalasida qayerda joylashganligi xavfsizlik xavfini qanday hal qilayotganingizga haqiqiy ta'sir ko'rsatadi. (Matias Madou)
Artificial Intelligence
Northstar Security Exits Stealth With $7M to Expose Toxic Risk Combinations
The startup maps how identities, assets and vulnerabilities connect, and uses AI agents to find and fix risky combinations of issues.
By
SecurityWeek News
| November 1, 2026 (7:15 AM ET)
*
Northstar Security, a startup developing AI agents for security teams, has emerged from stealth mode with $7 million in seed funding.
Wing Venture Capital led the round. MVP, Outliers, and cybersecurity veterans Gerhard Eschelbeck, Renaud Deraison, and Justin Somaini also invested.
The company ingests data from existing security and IT tools to build what it calls a Security Context Graph. Updated in real time, the graph shows how identities, assets, applications, vulnerabilities, and business systems connect to one another.
Northstar aims to catch so-called toxic combinations. Issues such as a vulnerability, an unmanaged device, or an account with excessive privileges may seem under control on their own, but together they can expose critical business systems.
For instance, the platform could flag a laptop lacking endpoint protection whose owner is a privileged user able to reach a critical payroll system.
Analysts can investigate findings like this by asking questions in plain language. Northstar’s agents can then kick off fixes, such as installing endpoint protection, notifying the user, or limiting their access, and people can supervise those actions where appropriate.
Advertisement. Scroll to continue reading.
Customers can also give external AI agents access to the graph through Model Context Protocol (MCP) and build their own security workflows. Northstar says it connects to more than 70 enterprise security and IT products, among them Okta, GitHub, Workday, Microsoft Defender and Entra, AWS, and Google Cloud.
“Security teams are drowning in data but starving for context,” said Amer Deeba, Northstar’s CEO and co-founder.
Deeba co-founded Normalyze, which Proofpoint later acquired, and was previously a senior executive at Qualys. His co-founder, CTO Ed Rowe, held the same role at Farmers Business Network and led engineering as an SVP at AppDynamics.
The startup will use the money to develop its platform, hire staff, and expand its go-to-market push.
Related: Secrets Management Firm Infisical Valued at $600 Million After $40 Million Raise
Related: Former Unit 8200 Officers Raise $34 Million for Agentic SecOps Startup Mave
Related: Indurex Raises $8 Million to Expand Industrial Cybersecurity Platform
Written BySecurityWeek News
Daily Briefing Newsletter
Subscribe to the SecurityWeek Email Briefing for the latest cybersecurity threats, trends, and expert insights.
Business Email*
emailsignupsource
Read our Privacy Policy for more information.
More from SecurityWeek News
- Secrets Management Firm Infisical Valued at $600 Million After $40 Million Raise
- In Other News: Tor Exit Relays Hijacked, Banks Spot Rogue AI Agents, Self-Rebuilding macOS Ransomware
- Asymptote Labs Lands $5.5 Million Seed for AI Agent Runtime Security
- In Other News: ICS-Sniper Attack, Hacking XWorm Malware Operators, $250k Chrome Exploit
- Watch Now: Zero Trust Strategies Summit – All Sessions Available on Demand
- IonQ to Acquire Zero Trust Firm Elisity for Up to $1.3 Billion
- In Other News: AI Used in Korean Bank Breaches, Poem-Guided Botnet, Empire Admin Gets 40 Years
- In Other News: $15K iCloud Spoofing Bugs, AI Policy Experts Phished, Adblocker Spies on AI Chats
Latest News
- Syrian Hacker Gets Prison Time in US After Over a Decade on the Run
- PHP2Shell Attacks Root Palo Alto Firewalls but Fail Against WordPress
- In Other News: Anthropic Breach Dispute, UEFI Flaw Hits Most Servers, Cloudflare AI Data Leak
- Passkeys Are Better Than Passwords. But They Are Not Enough.
- Bulletproof Host Virtualine Loses Its Domain to FBI Seizure
- Fresh WordPress Vulnerability in Attackers’ Crosshairs
- Drupal Commerce Core Vulnerability Exploited Against Online Stores
- $2 Million+ Drained From Polymarket Traders in New Supply Chain Attack
Trending
$6 Billion Binance Hack Bears Hallmarks of North Korea’s TraderTraitor
Oracle Health Data Breach Tally Climbs to Nearly 20 Million
PHP2Shell Attacks Root Palo Alto Firewalls but Fail Against WordPress
Cisco SD-WAN Zero-Day Exploitation Tied to Volt Typhoon’s ‘Silent Train’ Network
$2 Million+ Drained From Polymarket Traders in New Supply Chain Attack
Fresh WordPress Vulnerability in Attackers’ Crosshairs
In Other News: Anthropic Breach Dispute, UEFI Flaw Hits Most Servers, Cloudflare AI Data Leak
Node2Shell: Brotli Flaw Triggers Patching Across Microsoft, Node.js, Python Packages
Daily Briefing Newsletter
Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.
Business Email*
emailsignupsource
Read our Privacy Policy for more information.
Webinar: Agentic Pentesting for a Stronger CTEM Program
November 4, 2026
Close the security gaps between pentests. Join this session to explore agentic pentesting and gain a practical framework for continuous exposure validation in your CTEM program.
Register
Virtual Event: CISO Forum 2026 Summit
November 10 & 11, 2026
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
Register
People on the Move
Barracuda has appointed Dan Fletcher as CFO.
Artemis Security has appointed Arun Singh as CGO.
General Paul M. Nakasone has joined Armadin’s Board of Directors.
More People On The Move
Expert Insights
*
Passkeys Are Better Than Passwords. But They Are Not Enough.
As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.(Torsten George)
When Risk Becomes Personal: What Security Leaders Can Learn From a Cancer Diagnosis
Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.(Steve Durbin)
Nobody Trusts the Security Questionnaire. We Rely on It Anyway.
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.(Sravish Sridhar)
This is Fine: What NetScaler Zero-Days Tell Us About the New Normal
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.(Tod Beardsley)
The Key to AI Software Security Isn’t Speed, It’s Maturity
Where your developers sit on the AI adoption scale has a real impact on how you are addressing security risk.(Matias Madou)