Security Bulletin

Marlin AI operates within the AppOmni platform, continuously analyzing security indicators across business-critical applications.

PLAID ELITE handles the entire security operations workflow, including alert ingestion, enrichment, triage, investigation, and response, autonomously.

The attack campaign employs SEO poisoning to elevate fake installation pages in search engine results, leading developers searching for AI tools like Google Gemini CLI or Anthropic's Claude Code to typosquatted domains.

This integration aims to provide organizations with enhanced visibility and oversight for their use of Claude, a tool relied upon for knowledge work, analysis, and application development.

The incident came to light after Charter was listed on ShinyHunters' data leak site, where the group claimed to have stolen 40 million records.

The hacktivist group Ababil of Minab initially claimed responsibility for the breach, stating they had stolen and subsequently deleted data from the Los Angeles County Metropolitan Transportation Authority (LACMTA) systems.

The new feature automatically disconnects compromised endpoints from the network, limiting the risk of further impact while maintaining connectivity to the Defender for Endpoint service for continued monitoring.

New research from Flashpoint highlights a significant trend where threat actors are not focused on developing novel AI tools but rather on refining existing ones.

In just six hours, the campaign quietly pushed thousands of malicious commits to more than 5,500 GitHub repositories, stealing credentials, developer secrets, and more.

A recent congressional hearing highlighted how states are reeling from federal cutbacks to important cyber grants and information sharing initiatives amid damaging attacks to critical infrastructure.

TeamPCP, the hackers behind the Shai-Hulud worm, has done significant damage to the open source ecosystem. But it's not necessarily due to skill alone.

Every company needs an agentic AI strategy, but the tools to allow agentic AI frameworks be safely and securely adopted are just starting to appear.