Find notable cyber news and cases, enriched with sources, timelines, and signals.

Truffle Security raises $25 million Series B for secret scanning

Industry Action
First reported
Last updated
Happening score
H score 12
1 unique sources, 1 articles

Summary

Hide ▲

Truffle Security raised $25 million in a Series B round, giving the secret-scanning vendor fresh capital to expand its cybersecurity platform and product roadmap. The financing lifts total funding to over $40 million. The company said the money will support TruffleHog Enterprise and TruffleHog GCP Analyze. The add-on is aimed at improving visibility into leaked Google Cloud service accounts and speeding remediation.

Related Happenings

TeamPCP supply-chain credential-exploitation campaign

Campaign
First: 31.03.2026 15:15 Last: 31.03.2026 15:15 Sources 1

About this happening: The **TeamPCP** campaign now includes a confirmed **GitHub** compromise tied to a poisoned **Nx Console VS Code extension**. GitHub said the breach of its internal repositories ca...

Latest development: 12.05.2026 01:03

TeamPCP compromised the Checkmarx Jenkins AST plugin by publishing a rogue version to repo.jenkins-ci.org on May 9, 2026, outside the official release pipeline. The malicious upload was tied to access to Checkmarx GitHub repositories and was used to deliver credential-stealing malware and malicious code to the affected organization.

Apple bug bounty program expansion with doubled zero-click rewards

Security Tool/Service
First: 10.10.2025 19:50 Last: 10.10.2025 19:50 Sources 1

About this happening: Apple’s **bug bounty program** has been expanded and redesigned, doubling rewards for **zero-click remote compromise** and adding new research categories that raise the payoff for...

Wiz Zeroday.Cloud bug-bounty competition

Commercial Activity
First: 06.10.2025 12:44 Last: 06.10.2025 12:44 Sources 1

About this happening: Wiz launched Zeroday.Cloud, a $4.5 million bug-bounty competition focused on open-source cloud and AI tools. The program is backed by Google Cloud, AWS, and Microsoft and covers s...

Latest development: 06.10.2025 20:12

Wiz's research arm launched Zeroday Cloud, a bug-bounty competition for open-source cloud and AI tools with a $4.5 million prize pool, backed by Google Cloud, AWS, and Microsoft and scheduled for December 10 and 11 at Black Hat Europe in London, UK. The contest spans six categories across AI, Kubernetes and cloud-native, containers and virtualization, web servers, databases, and DevOps & automation, with payouts ranging from $10,000 to $300,000. Submitted exploits must achieve complete compromise, defined as a full Container/VM Escape for virtualization targets or a 0-click Remote Code Execution vulnerability for other targets, and participants must register through HackerOne, complete ID verification and tax forms by November 20, and comply with one-entry-per-target and country-restriction rules.

Timeline

  1. 06.11.2025 16:00 2 articles · 6mo ago

    Truffle Security raises $25 million Series B

    Initial Disclosure

    Truffle Security raised $25 million in a Series B led by Intel Capital and a16z, with additional support from Abstract, Lytical Ventures, and several angel investors, bringing total funding to over $40 million. The company said the capital will support TruffleHog Enterprise and TruffleHog GCP Analyze, an add-on that provides visibility into leaked Google Cloud service accounts and helps security teams assess impact, prioritize remediation, and reduce mean time to response.

    Show sources