#identity
-
When an AI Agent Is the Incident, the Identity Record Is the Evidence
A joint NIST, CISA and NSA guide urges rehearsing scenarios where AI agents act on their own. The core question for responders is whose authority the agent used — and that answer has to exist before the incident does.
-
TeamFiltration Campaign Cracks Seven Microsoft 365 Accounts via Default Passwords
The UNK_CondorFiltration password-spraying campaign hit more than 5,700 accounts across 28 Microsoft 365 tenants, mostly at Chilean retail and financial firms. All seven accounts that fell were forgotten service accounts with default passwords and no MFA.