News

Today, we are marking an important milestone in our incredible journey. Less than 9 months since we announced our $250M Series B, we are thrilled to announce our $400M Series C funding led by Bessemer Venture Partners with participation from each and every Upwind's investor: Greylock Partners, Cyberstarts, Craft, Salesforce Ventures, Alta Park, Picture Capital,…

TL;DR A supply chain security investigation has identified malicious code in LiteLLM version 1.107.0, a Python package distributed through PyPI. The affected package contains multiple files designed to execute code automatically when Python starts, retrieve attacker-controlled payloads, and maintain persistent access to compromised environments. Based on the analyzed package, this should be treated as a…

TL;DR PHP has released emergency fixes for two critical memory-corruption vulnerabilities, CVE-2026-109618 and CVE-2026-109619. Both allow unauthenticated remote code execution on default configurations. Details were leaked before the coordinated disclosure, which forced an accelerated release. Update to PHP 8.5.12, 8.4.27, 8.3.36 or 8.2.35 now. UPDATE: Now Official With Patch Versions UPDATE (October 21, 2026 14:00…

What started as a visibility problem has become something much more dynamic and urgent: understanding what is actually happening inside modern cloud environments, in real time. As infrastructure becomes more distributed, ephemeral, and increasingly shaped by AI, security teams need more than snapshots. They need context. They need precision. And they need answers that move…

Cloud Security has changed Teams are moving faster, architectures are getting more dynamic, and the old way of securing cloud environments with disconnected tools and static findings is no longer enough. Security leaders need more than posture snapshots. They need real-time context, runtime intelligence, and the ability to focus on what is actually exploitable. That…