OpenAI Fuels Fight Against Deepfakes with Adaptive Security Investment
Summary
- Investment Announcement: OpenAI’s Startup Fund co-led a $43 million Series A in Adaptive Security, OpenAI’s first cybersecurity investment.
- Technology Development: Adaptive simulates deepfake calls and AI phishing to train staff and score risk.
- Market Impact: The deal reflects rising worry about AI-powered social engineering.
- Strategic Importance: It signals OpenAI’s interest in defenses against misuse of AI.
OpenAI’s First Cybersecurity Bet
OpenAI has made its first investment in a cybersecurity company. On April 2, 2025, Adaptive Security announced a $43 million Series A round co-led by Andreessen Horowitz and the OpenAI Startup Fund. (Earlier versions of this article put the figure at $50 million and described it as an investment by OpenAI alone; that has been corrected.) The startup focuses on attacks that use AI-generated voices, video and text to fool employees.
How Deepfake Scams Work
Deepfakes use AI models to create realistic audio or video that is hard to tell from the real thing. Criminals now use them to impersonate executives on calls, or to make phishing messages far more convincing. The same tools feed misinformation campaigns and personal attacks.
Start your morning with the signal that matters.
Weekday mornings. Five minutes. What changed in security, why it matters.
By subscribing you agree to our Privacy Policy.
Free. Weekday mornings. 5 minutes or less.
Adaptive Security’s Groundbreaking Approach
Adaptive Security runs realistic simulations of deepfake calls and AI-written email and text phishing, so companies can see how their staff respond. It pairs that with tailored training, triage of reported threats and a risk score for the organization. CEO and co-founder Brian Long said the money would help scale defenses against AI-powered social engineering. (A quote attributed to a “Jane Elwood” as CEO in an earlier version has been removed; she is not the company’s CEO.)
Market Influence and Broader Implications
Deepfakes are a growing risk for media and elections, and for any business that approves payments over the phone. Backing from OpenAI and a16z gives Adaptive money and visibility at a time when these attacks are spreading. (A quote attributed to a named analyst in an earlier version has been removed because we could not confirm it.)
A Collaborative Effort in Cyber Defense
The deal ties an AI developer to a company that defends against AI misuse. That pairing is likely to draw more interest from investors.
Looking Ahead: Challenges and Opportunities
The work is far from done. Deepfake tools improve quickly, so defenses have to keep adapting. Training people to pause and verify before acting remains one of the best protections.
Start your morning with the signal that matters.
Weekday mornings. Five minutes. What changed in security, why it matters.
By subscribing you agree to our Privacy Policy.
Free. Weekday mornings. 5 minutes or less.
What the Deal Signals
OpenAI’s stake in Adaptive Security shows that AI makers see social engineering as a serious threat. For companies, the practical lesson is simple: assume a convincing voice or video can be faked, and build checks around payments and access that do not depend on recognizing someone.
Newer CyberExperts coverage on this topic
This article still works as background. If you want the current picture, start with the freshest related coverage below and today's brief.
Citrix NetScaler CVE-2026-19490: The Auth Bypass That Went From PoC to Probes in a Day
CVE-2026-19490 is a CVSS 9.3 NetScaler Gateway/AAA auth bypass. A public PoC on Sept 2 was followed by live probes within a...
PaperCut NG/MF: The Print Server That Learned Remote Code Execution Again
CVE-2026-81578 and CVE-2026-82078 chain to pre-auth RCE on PaperCut Application Server. Confirm Emergency Patch Release 2, restrict admin exposure, and hunt like...
JFrog Artifactory CVE-2026-82329: Empty Join Key, Full Admin Token, Busy Scanners
CVE-2026-82329 lets attackers forge Artifactory admin tokens via a deterministic empty join key. Mass scanning peaked near 406,000 attempts; patch fixed builds...
Friday’s brief: Apache’s HTTP/2 fix, then Check Point break-ins, a ScreenConnect add-on and a GitHub secret stealer
The fastest way to catch up on what changed after this article was published.
Start your morning with the signal that matters.
Get the biggest cybersecurity developments, why they matter, and where to go deeper on CyberExperts.
By subscribing you agree to our Privacy Policy.
Free. Weekdays. Built for operators.