Loading story…
Armadin, a new cybersecurity startup led by Kevin Mandia (founder of Mandiant), launched from stealth after raising roughly $190M in combined seed and Series A funding led by Accel, with participation reported from investors including GV, Kleiner Perkins, Menlo Ventures, 8VC, Ballistic Ventures, and In-Q-Tel. The company is positioning the round as unusually large for an early-stage security startup and is not disclosing valuation. Armadin’s stated focus is building autonomous AI agents intended to learn and act without a human in the loop, motivated by the expectation that “autonomous AI hackers” will materially accelerate attacker timelines.
Armadin says it will apply agent orchestration concepts (including swarm architectures and inter-agent communication protocols) to replicate complex offensive security workflows and enable continuous, at-scale testing of customer environments. Company leadership describes a shift from LLM “advice and reporting” toward agents that can execute tasks, combining AI “attack agents” with human expertise to simulate real-world cyberattacks and automate elements of penetration testing and red-teaming. Separately, commentary on enterprise AI adoption emphasized that “plug-and-play” AI is unlikely to deliver value without significant integration work across systems, workflows, and operating models—an adoption reality that may also shape how organizations operationalize agentic security tooling.
Get the actors, campaigns, and ATT&CK mapping behind it.
4 events from the most recent confirmed update back to the earliest known activity.
At launch, Armadin said it is building autonomous AI agents to automate penetration testing, red-teaming, and broader defensive security operations, including orchestrated swarm agents that can test web apps, external infrastructure, and internal networks in parallel.
Kevin Mandia's new San Francisco-based startup, Armadin, launched from stealth with $189.9 million in combined seed and Series A funding led by Accel, with participation from GV, Kleiner Perkins, Menlo Ventures, 8VC, Ballistic Ventures, and In-Q-Tel.
Google acquired Mandiant in a $5.4 billion deal, providing the backdrop for Kevin Mandia's subsequent return to startup building.
Kevin Mandia founded cybersecurity company Mandiant, which is cited as the earlier company behind his later startup efforts.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
Get the adversaries, campaigns, and ATT&CK mapping behind this technique, with detections ready to deploy.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Resecurity warned that autonomous AI offensive security agents are turning penetration testing from scripted automation into adaptive, multi-agent operations that can perform reconnaissance, map attack surfaces, identify vulnerabilities, validate exploits, and generate reports with minimal human input. The report highlighted tools including **T3MP3ST**, **Strix**, **CyberStrike**, **XBOW**, **PentAGI**, **PentestGPT**, **Nebula**, **PentesterFlow**, **Hackian**, and specialized offensive-security LLMs such as `CyberStrike-OffSec-35B`, describing them as increasingly capable dual-use systems. Security researchers said the same capabilities are lowering the barrier for financially motivated criminals and state-backed actors, making AI-assisted offensive operations practical rather than theoretical. The reporting cited examples including **FortiBleed**, **JadePuffer**, **GTG-2002**, **GTG-5004**, and the Claude Desktop “double agent” demonstration, and urged organizations to respond with a hybrid defense model built on human oversight, behavioral detection, network segmentation, continuous exposure validation, governance of AI tooling, and rapid patching of high-value flaws.
Jul 31, 2026
OpenAI announced it is acquiring **Promptfoo**, an AI security startup focused on testing and hardening LLMs against adversarial abuse. OpenAI said Promptfoo’s technology will be integrated into *OpenAI Frontier* (its enterprise AI-agent platform) to support automated red-teaming, security evaluation of agentic workflows, and monitoring for risk and compliance, while continuing to develop Promptfoo’s open-source tooling. Separately, red-team startup **CodeWall** reported that its autonomous AI agent compromised McKinsey’s internal generative AI platform (*Lilli*) and obtained full read/write access to the chatbot environment within roughly two hours, without using credentials. CodeWall claimed access to large volumes of sensitive data in plaintext (including chat logs, files, user accounts, and system prompts), and emphasized that writable system prompts could enable response poisoning and manipulation of outputs at scale—highlighting how agentic AI can be used to accelerate intrusions and why enterprises are prioritizing agent security controls and continuous adversarial testing.
Jun 29, 2026
Security leaders are warning that **agentic AI** is shifting the threat model by turning authenticated, permissioned access into a primary attack path. Symantec argues that controls designed around human behavior and pace (e.g., static credentials, overprivileged access, and human-scale monitoring) are poorly suited to autonomous agents that can operate at machine speed, rapidly probing APIs and systems and using existing permissions to move laterally. The post highlights proof-of-concept and prior incidents where agent behavior can be manipulated to expose secrets (e.g., coercing a voice agent to reveal an API key), framing an agent’s own decision logic as an exploitable attack surface that drives the need for redesigned authorization and tighter identity/access models. Microsoft threat intelligence reporting, echoed in an interview with *The Register*, describes threat actors using AI agents to automate “janitorial” tasks that materially increase operational tempo—especially **reconnaissance** and **attack infrastructure** setup/management. Sherrod DeGrippo (Microsoft) said autonomous agents can be tasked to scan target netblocks, inventory compromised environments, and accelerate standing up infrastructure, and Microsoft has observed North Korea-linked **Coral Sleet** leveraging development platforms to quickly create and manage infrastructure supporting campaigns (including activity associated with the fake IT worker scam). Together, the reporting indicates agentic AI is already being applied to make attacks **better, bigger, and faster**, with defenders needing to account for automated, high-velocity activity that may originate from valid credentials and legitimate tooling.
Jun 29, 2026