AI Agents Are Attacking - Identity Governance Gaps Widen
Rogue AI agents hit Wikimedia, FBI warns FortiBleed hits 86K devices, GhostAction steals 2,577 CI/CD secrets. Apple restricts macOS over agent risk.
Posts tagged: Itdr
NetScaler SAML Zero-Day CVE-2026-88779 Exploited
CVE-2026-88779 NetScaler SAML zero-day exploited in the wild. Denmark CPR breach exposes 8.8M identities. Apple restricts AI agent access on macOS.
Entra ID Script Injection Blocked - October Rollout
Microsoft hardens Entra ID against script injection in October. Storm-3068 pivoted from password reset to Kubernetes.
Fake EDR Scam Burns Revolut - OAuth Token Theft
Revolut disclosed customer data to fraudsters via fake Emergency Data Requests. CVE-2026-85706 GitLab CVSS 10 hits KEV. OAuth tokens stolen from 31K users.
Dropbox Breached via Lenovo SSO - OAuth Trust Chains Fail
Dropbox accounts breached through Lenovo SSO trust-chain flaw. Plus CVE-2026-83548 SonicWall CVSS 10 pre-auth RCE and 153M stolen driver's licenses.
AI Session Hijacking Arrives - Claude Tokens Under Attack
Infostealers hijack Claude AI session tokens in first major AI identity theft campaign. Plus Claude Code governance gaps and Teams voice phishing hits DCs.
ITDR on Cisco ISE: Behavioral Identity Scoring with AWS Serverless
Closing the ITDR gap in Cisco ISE - a closed-loop AWS serverless architecture for behavioral identity scoring with pxGrid in, CoA out, under $50/month.