Amazon appoints Kevin Mandia to board of directors
Amazon has named Kevin Mandia, founder of cybersecurity firm Mandiant, to its board of directors. Mandia, who previously sold Mandiant to Google and left Google in 2024, also runs the security startup Armadin and co-founded Ballistic Ventures. Amazon said Mandia brings deep experience as cyber threats, including those involving AI, continue to rise. He was granted stock worth about $1 million as part of the appointment.
- Mandia joined on September 8, per Amazon's statement
- He previously held cybersecurity roles in government and private sector
- Mandia founded Mandiant and sold it to Google in 2022
- His Amazon board shares vest over three years beginning 2027
- He is CEO of Armadin and co-founder of Ballistic Ventures
Sources covering this
In this story
More in Cybersecurity
Microsoft releases record number of security patches
Microsoft released updates to fix at least 974 security vulnerabilities across Windows and other products, its largest patch release to date. The update includes critical flaws, some already being exploited, and over 100 rated as dangers that could let attackers seize control of systems. The unprecedented volume is partly due to the use of AI for vulnerability detection, but experts warn that rapid growth complicates efforts to test and deploy fixes.
OpenAI pledges $1 billion for AI cyber defense program
OpenAI has pledged $1 billion in credits to help organizations defending critical U.S. infrastructure—including water utilities, electric grids, local governments, banks, and nonprofits—access its AI-powered cybersecurity tools, training, and support. The "Daybreak for Frontline Defenders" initiative aims to help these sectors strengthen their defenses as AI-driven cyberattacks become more advanced. OpenAI says it will expand the program to partner countries in the coming weeks.
Liquid Network exploit creates $320 million in unbacked bitcoin
Attackers exploited a software bug in Blockstream's Liquid Network, a Bitcoin sidechain, creating about 4,000 unbacked Liquid Bitcoin (L-BTC) and withdrawing $320 million. The attackers identified themselves as white hat hackers and have returned most funds, retaining around $47 million. According to Blockstream, the incident did not involve compromised multisig keys but was caused by a vulnerability in recent node software.
Google warns of rising attacks on enterprise AI assets
Google Cloud's security team reports that attackers are increasingly targeting enterprise AI systems, including proprietary models, source code, and cloud resources. Threat actors have shifted from using basic AI prompts to deploying automated, multi-agent AI workflows that can execute breaches rapidly, sometimes in under six hours. The report highlights incidents of mass credential theft and the compromise of cloud infrastructure to run unauthorized AI workloads.