… Sophos found no evidence that AI was embedded in deployed malware or operating independently in victim environments. Instead, the technology was used to accelerate the iterative process of developing, testing, and refining payloads against security products. …
… They're thinking differently about what privilege means in a cloud-first environment. In the organizations we work with, AI agents have quickly evolved from a future concern into a present reality almost overnight, and most lack the AI security posture management necessary for proper governance. …
… Tycoon2FA adds device-code phishing According to new research from managed detection and response company eSentire, Tycoon2FA confirms that device code phishing has become highly popular among cybercriminals. “The attack begins when a victim clicks a Trustifi click-tracking URL in a lure email and … …
… The researchers said that the campaigns primarily targeted Microsoft 365 environments using phishing emails that directed victims to Microsoft's device code login portal, where they unknowingly authorized attackers to access their accounts. …