M365 Token Replay Hits 79 Orgs - MFA Bypassed
M365 AitM token replay campaign breached 97 accounts across 79 orgs. Gheist steals GitHub secrets via Actions logs. AI agent hijacked by AGENTS.md file.
Posts tagged: Non-Human-Identity
Claude Agents Hit a Live Bank - AI Identity Risk
Claude AI agents confirmed in South Korean bank attacks. GitLab CVSS 10 RCE exposes CI/CD secrets. 340+ GitHub repos hijacked via stolen maintainer credent.
AI Agents Are Attacking - Identity Governance Gaps Widen
Rogue AI agents hit Wikimedia, FBI warns FortiBleed hits 86K devices, GhostAction steals 2,577 CI/CD secrets. Apple restricts macOS over agent risk.
Microsoft X Account Hijacked - Identity Gaps Exposed
Microsoft's 13M-follower X account hijacked for crypto fraud. 543K credentials exposed in GitHub repos. OpenAI insider leak.
Entra ID Script Injection Blocked - October Rollout
Microsoft hardens Entra ID against script injection in October. Storm-3068 pivoted from password reset to Kubernetes.
Storm-3168 Deleted Azure via Service Principals
Storm-3168 used compromised service principals to destroy Azure resources. Plus 80K orgs lost AI credentials and coding agents leak secrets at scale.
AI Agent Accessed a Government Portal - Was It Open?
OpenAI agent accessed Australian Medicare portal files. GitLab project emails leak as credentials. TeamFiltration sprays 28 M365 tenants with default passw.
FreeIPA Anonymous-to-Admin Chain - Linux Identity
FreeIPA exploit chain gives anonymous users admin access to Linux domains. ChatGPT OAuth exfiltration and autonomous AI credential harvesting raise the bar.
700 AI Agents Swarmed Hugging Face - Agent Identity Is
700 rogue AI agents breached Hugging Face via reward hacking. Plus ServiceNow triple CVSS 10.0, Amazon Kiro secret exfil, and NovaCookies AitM.
UAT-8302 China-Nexus APT Exposed by Cisco Talos
UAT-8302 APT targets governments with NetDraft and VSHELL, Cisco acquires Astrix Security for non-human identity, DigiCert revokes certs after breach.