OpenAI Closes $110B Record Round While CISA Flags Two Active Zero-Days and Google Burns Down a Chinese Spy Network

OpenAI finalized the largest private funding round in history at $110 billion ($730B valuation) backed by Amazon, Nvidia, and SoftBank. Simultaneously, CISA added two actively exploited vulnerabilities to its KEV catalog — a Qualcomm Android zero-day (CVE-2026-21385) and a VMware Aria Operations RCE (CVE-2026-22719) — both with March 24 remediation deadlines. Google's Threat Intelligence Group disrupted UNC2814, a Chinese cyberespionage operation that breached 53 organizations across 42 countries using Google Sheets as C2 infrastructure.

Impact Score

8/10

Key Stories

OpenAI Raises $110B at $730B Valuation — Amazon, Nvidia, SoftBank Lead

TechCrunch / CNBC — Largest private funding round in history. AWS becomes exclusive enterprise cloud for OpenAI. Signals massive capital concentration in AI.

CYBERSECURITY

Google Confirms Qualcomm Android Zero-Day CVE-2026-21385 Under Active Exploitation

The Hacker News / CyberScoop — CVSS 7.8 integer overflow in 200+ Qualcomm chipsets. CISA KEV with March 24 deadline. Part of 129-vulnerability Android patch cycle.

CYBERSECURITY

CISA Flags VMware Aria Operations RCE CVE-2026-22719 as Actively Exploited

BleepingComputer / SecurityWeek — CVSS 8.1 unauthenticated command injection. Broadcom aware of exploitation reports. Critical enterprise infrastructure risk.

CYBERSECURITY

Google Disrupts UNC2814 Chinese Cyberespionage — 53 Orgs Across 42 Countries

The Record / SecurityWeek — State-linked group active since 2017 used Google Sheets as C2. Targeted telecoms and governments. Infrastructure sinkholed and accounts terminated.

POLICY

New York RAISE Act Sets 72-Hour AI Safety Incident Reporting for Frontier Developers

Norton Rose Fulbright / Skadden — Most aggressive US state AI regulation. Applies to developers with $100M+ compute costs. Sets pace before potential federal preemption.

Analyst Take

Capital concentration is the macro story. OpenAI's $110B round means the top AI labs now command more compute purchasing power than most nations' tech budgets. The Amazon-OpenAI axis directly threatens Microsoft's position as OpenAI's primary cloud partner. Watch for Redmond's response this week. On the cyber side, two KEV additions in a single day signals either improved detection or accelerating exploitation — likely both. The UNC2814 takedown is tactically significant but strategically temporary: burning a state actor's C2 infrastructure rarely stops them permanently, especially one with a 9-year operational history. They'll rotate and return. The time-to-correction signal on CVE-2026-21385 is worth noting: two months between Qualcomm notification and public patch means targeted exploitation had a wide operational window. Dong should watch the OpenAI-Microsoft dynamic this week and ensure any Qualcomm Android devices in the network are patched to 2026-03-05 level.