AI agents depend on tools, skills, and other agents spread across many teams, organizations, and platforms. These capabilities live in separate systems with their own registries, and an agent working in one environment has limited means to locate and connect to a resource hosted somewhere else. Goog...
As we noted in our earlier analysis, attackers already know secrets are on your developers’ machines, the only question is whether security teams do. The supply chain attack calendar of 2026 has been relentless. Megalodon backdoored 5,500 GitHub repositories in six hours. TrapDoor spread across npm,...
Inside the labs building frontier AI, a growing share of the coding gets done by the AI itself. These agents write, edit, and run software with light human oversight between steps, and they reach into production infrastructure, research pipelines, and potentially the systems that train and evaluate...
La fuite FortiBleed expose les identifiants VPN de 73 000 pare-feu Fortinet Ă travers le monde. DĂ©couvrez l'ampleur de la fuite et les mesures Ă prendre.
Le post FortiBleed : une fuite expose les identifiants VPN de 73 000 pare-feu Fortinet a été publié sur IT-Connect.
AWS Continuum for code vulnerabilities, a system built to handle a vulnerability across its lifecycle, from discovery through to a fix, is now available in gated preview. It reasons over a customer’s environment, confirms which findings are real, and works toward resolution. It is model agnostic and...
Anyone who installs software through a third-party Homebrew tap runs Ruby code written by people outside the project, and that code runs without a sandbox. That risk sits at the center of Homebrew 6.0.0. Tap trust Homebrew now requires a tap, along with any tap-qualified formula or cask, to be trust...
A poisoned npm package infected 140+ projects with a hidden payload. This report highlights how to detect, hunt, and defend against supply chain attacks using Microsoft Defender and actionable threat intelligence.
The post From package to postinstall payload: Inside the Mastra npm supply chain compr...
Enterprises are connecting AI agents to live data feeds and putting them to work on tasks that once required human review, from IT operations to software development. The number doing this in production reached 32 percent in 2026, up from 29 percent the year before, according to Confluent’s annual D...
In March 2026, the financial consulting and advisory firm CFGI was the target of a ShinyHunters "pay-or-leak" extortion campaign. The group subsequently publicised data allegedly obtained from CFGI comprising corporate contact information, including 243k unique email addresses, names, phone numbers...
Latest Interpol review shows how scams continue to dominate, and AI-enabled attackers prove too hot to handle for cash-strapped regions
[This is a Guest Diary by Adam Nason, an ISC intern as part of the SANS.edu BACS program]
OpenAI appears to be testing a new subscription and experience for science use cases, but it's unclear if it'll be available to everyone regardless of their background. [...]
Cedro Têxtil a été victime d'un incident de cybersécurité qui a affecté ses infrastructures informatiques et perturbé le fonctionnement de ses systèmes d'entreprise. L'entreprise a mobilisé des experts pour maîtriser la situation et s'efforce actuellement de rétablir ses activités en toute sécurité....
Le Stadttheater Gießen a été victime d'une cyberattaque menée par un groupe qualifié de « hautement professionnel et mondial ». L'attaque, survenue le 18 juin, a rendu inaccessibles toutes les données et sauvegardes du théâtre. Bien que les canaux de communication réguliers soient hors service, les...
Continuing our Agent ID series, this post demonstrates how a privileged agent could be compromised through its third-party blueprint. This leads to a cross-tenant incident similar to Midnight Blizzard, since an attacker with control over an agent blueprint can authenticate as any agent associated wi...
Le Cameron Regional Medical Center a été victime d'une attaque par ransomware. L'incident a été découvert le 18 juin 2026. Le groupe Anubis a revendiqué l'attaque le 3 août 2026, affirmant avoir obtenu une large gamme de données, incluant dossiers médicaux, informations financières, données personne...
La Széchenyi Programiroda a été victime d'une cyberattaque partielle, suite à laquelle des données de l'entreprise et de deux de ses employés ont été compromises. L'attaque a été attribuée au groupe Rhysida hekkercsoport, qui a exigé 20 bitcoins en échange des données. Les autorités nationales de cy...