Security Bulletin

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

[This is a Guest Diary by Adam Nason, an ISC intern as part of the SANS.edu BACS program]

Aembit's David Goldschlag breaks down the challenges of implementing IAM for AI.

P0 Security's Neha Duggal examines how to establish accountability, delegation and attribution.

Token Security's Itamar Apelblat discusses why identity is the right lens for understanding agentic AI risk.

Coverage from Tech Radar indicates that a sophisticated phishing-as-a-service platform, known as Kali365, Octopi365, and Freedom365, is actively targeting Microsoft accounts.

The exposed database, weighing approximately 8 terabytes, was compiled from 36 different sources, including Telegram channels, previous data breach collections, and data exported from live servers.

The program, a collaboration between the Executive Office of Technology Services and Security and the Community Compact Cabinet, provides funding to address risks identified through the Cybersecurity Health Check Program.

The flaw was added to CISA’s Known Exploited Vulnerabilities catalog with a three-day deadline.

And one of those basics is focusing on sectors where a ransomware disruption creates immediate pressure to pay up, like with healthcare.

DragonForce ransomware abused Microsoft Teams relay infrastructure to hide C2 traffic.

[This is a guest diary submitted by Varun Murdula]