Security

Window Snyder’s new startup Thistle Technologies raises $2.5M seed to secure IoT devices

Comment

A field of Milk thistles bloom during spring season in Almaz
Image Credits: Jorge Sanz / SOPA Images (opens in a new window) / Getty Images

The Internet of Things has a security problem. The past decade has seen wave after wave of new internet-connected devices, from sensors through to webcams and smart home tech, often manufactured in bulk but with little — if any — consideration given to security. Worse, many device manufacturers make no effort to fix security flaws, while others simply leave out the software update mechanisms needed to deliver patches altogether.

That sets up to fail an entire swath of insecure and unpatchable devices, destined to be thrown out when they break down or are invariably hacked.

Security veteran Window Snyder thinks there is a better way. Her new startup, Thistle Technologies, is backed with $2.5 million in seed funding from True Ventures with the goal of helping IoT manufacturers reliably and securely deliver software updates to their devices.

Snyder founded Thistle last year, and named it after the flowering plant with sharp prickles designed to deter animals from eating them. “It’s a defense mechanism,” Snyder told TechCrunch, a name that’s fitting for a defensive technology company. The startup aims to help device manufacturers without the personnel or resources to integrate update mechanisms into their device’s software in order to receive security updates and better defend against security threats.

“We’re building the means so that they don’t have to do it themselves. They want to spend the time building customer-facing features anyway,” said Snyder. Prior to founding Thistle, Snyder worked in senior cybersecurity positions at Apple, Intel and Microsoft, and also served as chief security officer at Mozilla, Square and Fastly.

Is there still room in the cloud-security market?

Thistle lands on the security scene at a time when IoT needs it most. Botnet operators are known to scan the internet for devices with weak default passwords and hijack their internet connections to pummel victims with floods of internet traffic, knocking entire websites and networks offline. In 2016, a record-breaking distributed denial-of-service attack launched by the Mirai botnet on internet infrastructure giant Dyn knocked some of the biggest websites — Shopify, SoundCloud, Spotify, Twitter — offline for hours. Mirai had ensnared thousands of IoT devices into its network at the time of the attack.

Other malicious hackers target IoT devices as a way to get a foot into a victim’s network, allowing them to launch attacks or plant malware from the inside.

Since device manufacturers have done little to solve their security problems among themselves, lawmakers are looking at legislating to curb some of the more egregious security mistakes made by default manufacturers, like using default — and often unchangeable — passwords and selling devices with no way to deliver security updates.

California paved the way after passing an IoT security law in 2018, with the U.K. following shortly after in 2019. The U.S. has no federal law governing basic IoT security standards.

Snyder said the push to introduce IoT cybersecurity laws could be “an easy way for folks to get into compliance” without having to hire fleets of security engineers. Having an update mechanism in place also helps keep the IoT devices around longer — potentially for years longer — simply by being able to push fixes and new features.

“To build the infrastructure that’s going to allow you to continue to make those devices resilient and deliver new functionality through software, that’s an incredible opportunity for these device manufacturers. And so I’m building a security infrastructure company to support that security needs,” she said.

With the seed round in the bank, Snyder said the company is focused on hiring device and back-end engineers and product managers, and building new partnerships with device manufacturers.

Phil Black, co-founder of True Ventures — Thistle’s seed round investor — described the company as “an astute and natural next step in security technologies.” He added: “Window has so many of the qualities we look for in founders. She has deep domain expertise, is highly respected within the security community and she’s driven by a deep passion to evolve her industry.”

UK’s IoT ‘security by design’ law will cover smartphones too

More TechCrunch

Siri got a makeover at Apple’s annual WorldWide Developer Conference (WWDC) in Cupertino, courtesy of Apple’s overarching generative AI push this year. Siri is now more natural, more relevant, and…

Apple gives Siri a makeover

The TechCrunch the team runs down all of the biggest news from the Apple WWDC 2024 keynote in an easy-to-skim digest.

Here’s everything Apple announced at the WWDC 2024 keynote, so far

Apple Tuesday unveiled Apple Intelligence, its long awaited, ecosystem-wide push into generative AI. As earlier rumors suggested, the new feature is called Apple Intelligent (A.I., get it?). The company promised…

Apple Intelligence is the company’s new generative AI offering

In addition to all the features you can find in the Passwords menu today, there’s a new column on the left that lets you more easily navigate your password collection.

Apple is launching its own password manager app

Apple announced at WWDC on Monday that iPadOS 18 will include a new “Smart Script” feature that will clean up your handwriting when using an Apple Pencil to write in…

Smart Script in iPadOS 18 will clean up your handwriting when using an Apple Pencil

iOS’ perennial tips calculating app is finally coming to the larger screen.

Calculator for iPad does the math for you

The new OS, announced at WWDC 2024, will allow users to mirror their iPhone screen directly on their Mac and even control it.

With macOS Sequoia, you can mirror your iPhone on your Mac

At Apple’s WWDC 2024, the company announced MacOS Sequoia.

Apple unveils MacOS Sequoia

“Messages via Satellite,” announced at Apple’s WWDC 2024 keynote, works much like the SOS feature did.

iPhones will soon text via satellite

Apple says the new design will lead to less time searching for photos.

Apple revamps its Photos app for iOS 18

Users will be able to lock an app when they hand over their phone.

iOS 18 will let you hide and lock apps

Today’s WWDC 2024 keynote has been packed so for, including a number of key new updates for iOS 18. One of the more interesting additions is Tap to Pay, which…

Tap to Cash lets you pay by touching iPhones

In iOS 18, Apple will now support long-requested functionality, like the ability to set app icons and widgets wherever you want.

iOS 18 will finally let you customize your icons and unlock them from the grid

Apple is sharing the first details for the upcoming major release of iOS, its operating system specifically designed for the iPhone. The company is holding its Worldwide Developers Conference (WWDC)…

Apple unveils iOS 18 with a myriad of AI-powered features

Apple today kicked off what it promised would be a packed WWDC 2024 with a handful of VisionOS announcements. At the top of the list, is the ability to turn…

VisionOS can now make spatial photos out of 3D images

The Apple Vision Pro is now available in eight new countries.

Apple to release Vision Pro in international markets

VisionOS 2 will come to Vision Pro as a free update later this year.

Apple debuts VisionOS 2 at WWDC 2024

The security firm said the attacks targeting Snowflake customers is “ongoing,” suggesting the number of affected companies may rise.

Mandiant says hackers stole a ‘significant volume of data’ from Snowflake customers

French startup Kelvin, which uses computer vision and machine learning to make it easier to audit homes for energy efficiency, has raised $5.1M.

Kelvin wants to help save the planet by applying AI to home energy audits

A last call and a major shoutout to any and all early-stage founders. It’s time to dig deep and take advantage of an unparalleled opportunity at TechCrunch Disrupt 2024 —…

Only hours left to apply to Startup Battlefield 200 at Disrupt

Privacy watchdogs in the U.K. and Canada have launched a joint investigation into the data breach at 23andMe last year.  On Monday, the U.K,’s Information Commissioner’s Office (ICO) and the…

UK and Canada privacy watchdogs investigating 23andMe data breach

Dubai-based fractional property investment platform Stake has raised $14 million in Series A funding.

Stake raises $14M to bring its fractional property investment platform to Saudi Arabia, Abu Dhabi

“We were motivated to fundraise because we think the ’24 vintage is going to be a good one,” founder Craig Shapiro said.

After hits like Reddit and Scopely, Collaborative Fund easily raised a $125M fund to tackle climate, health and food

The merger has yet to close due to extended due diligence amid ongoing restructuring and macroeconomic headwinds across multiple countries.

Sources: Wasoko-MaxAB e-commerce merger faces delays amid headwinds in Africa

The keynote will be focused on Apple’s software offerings and the developers that power them, including the latest versions of iOS, iPadOS, macOS, tvOS, visionOS and watchOS.

Watch Apple kick off WWDC 2024 right here

Featured Article

What to expect from WWDC 2024: iOS 18, macOS 15 and so much AI

Apple is hoping to make WWDC 2024 memorable as it finally spells out its generative AI plans.

8 hours ago
What to expect from WWDC 2024: iOS 18, macOS 15 and so much AI

While funding for Italian startups has been growing, the country still ranks eighth in Europe by VC investment, according to Dealroom. Newly created Italian Founders Fund (IFF) hopes to help…

With €50 million to invest, Italian Founders Fund looks for entrepreneurs with global ambitions

William A. Anders, the astronaut behind perhaps the single most iconic photo of our planet, has died at the age of 90. On Friday morning, Anders was piloting a small…

William Anders, astronaut who took the famous ‘Earthrise’ photo, dies at 90

You’re running out of time to join the Startup Battlefield 200, our curated showcase of top startups from around the world and across multiple industries. This elite cohort — 200…

Startup Battlefield 200 applications close tomorrow

New York’s state legislature has passed a bill that would prohibit social media companies from showing so-called “addictive feeds” to children under 18, unless they obtain parental consent. The Stop…

New York moves to limit kids’ access to ‘addictive feeds’