Identity & access
-
Microsoft links ConnectWise compromise to AI-assisted cloud intrusion campaign
Microsoft attributes a major ConnectWise cloud application compromise to China-aligned Storm-0940, saying the group used the ARTEX AI penetration testing framework to accelerate attempts against Microsoft 365 tenants.
-
Fake Amazon Business advert delivers credential stealer through ClickFix campaign
Huntress has uncovered a malicious Google search advert impersonating Amazon Business, leading visitors through a fake verification step to Windows malware capable of stealing credentials and enabling remote access.
-
Traefik fixes ForwardAuth flaw that could expose users to identity impersonation
Traefik has patched an authentication flaw that could allow an unauthenticated client to inherit another user’s identity when ForwardAuth relies on NTLM or Kerberos Negotiate connections.
-
eMudhra identifies weak certificate keys as browsers tighten trust protections
eMudhra says a flawed key generation process produced weak private keys for eight intermediate certificate authorities, prompting emergency browser protections and changes to certificate trust stores.
-
Sumsub adds data access and approval rules for MCP-connected AI agents
Sumsub has introduced a Know Your Agent module for controlling requests made through MCP connections. It says the service can filter sensitive data, log agent activity, and demand human verification for certain actions, initially with Amazon Bedrock AgentCore Gateway.
-
Cloudflare Zero Trust outage interrupts identity policy decisions
Cloudflare restored its Zero Trust connectivity after a 20 October fault affected Gateway traffic governed by identity conditions. Edge services recovered before its Access API; the company has not established a public root cause.
-
Criminal marketplaces offer identity verification bypass services
Research into underground identity fraud services describes how criminals advertise forged documents, manipulated video, and supposedly verified accounts for use against financial onboarding controls.
-
Microsoft expands controls for enterprise AI agents
Microsoft has outlined new identity, permission, and containment capabilities intended to restrict AI agents as their behaviour and operating context change.
-
OpenCode breach exposes AI service credentials
OpenCode has notified some users that API keys connected to external AI providers were exposed during a breach associated with a large-scale model distillation attack.
-
Treasury tightens controls over Budget documents
The UK Treasury has reportedly introduced tighter restrictions on access to confidential Budget material, including enhanced document tracing and electronic monitoring of information sharing.