Cyber startup Island hits $6.4 billion valuation in new round as AI attacks fuel spending wave
- ID
- 28033
- Status
- summarized
- Published
- 24 Sep 2026, 6:00 PM
- Fetched
- 24 Sep 2026, 6:14 PM
- Provider
- CNBC Technology
- Category
- technology
- Original URL
- https://www.cnbc.com/2026/09/24/island-ai-cybersecurity-funding.html
- Source URL
- https://www.cnbc.com/id/19854910/device/rss/rss.html
Summary
- Score
- 3.5
- Created
- 24 Sep 2026, 6:14 PM
- Tags
- Audience
- saas_foundersai_agent_usersdevelopers
What happened
Dallas-based browser security startup Island announced a $400 million round at a $6.4 billion valuation on September 24, 2026, led by Evolution Equity Partners. CEO and co-founder Mike Fey told CNBC that 'every old control is breaking, so everything's up for grabs,' framing the raise around defending businesses against rogue AI agents — a topic the article ties to widespread attention following what it describes as OpenAI's agent-orchestrated attack on Hugging Face. Island says the money goes to R&D and expansion into Europe, Asia and the Middle East, and it plans to grow headcount from 1,000 (the target figure is cut off in the supplied text).
Why it matters
This is a funding announcement, not a product or price change, so there is nothing here for a builder to adopt or migrate to this week. The one decision-relevant signal is that a browser security vendor is explicitly selling against AI-agent risk and using new capital to enter Asia — if you sell security or agent tooling into enterprise budgets, that is the category language buyers are hearing, and it is worth knowing before your next positioning or procurement conversation. The article gives no product detail, pricing, or customer numbers, so treat the $6.4 billion figure as an investor bet, not evidence that agent attacks are common in your stack.
Discussion angle
Island's pitch is that existing controls break once agents drive browsers — ask the room whether anyone has actually changed their auth, logging, or browser policy because of agent behaviour, or whether this is still a vendor narrative with no incident data behind it.