AI AGENTS BECOME IDENTITY RISK AS OVERSIGHT LAGS
■ AI-SUMMARIZED FROM 1 SOURCE ▸ TIMELINE
AI agents now access data, trigger workflows, and deploy code across critical business systems with minimal governance controls. Security researchers warn that organizations are failing to manage these digital entities as formal identities.
■ MORE FROM THE SECURITY DESK
Cyberattacks against hedge funds and private equity firms have been attributed to UNC6671, an extortion group connected to the BlackFile threat actors. The campaign represents an escalating threat to the financial sector.
A Go-based malware distributed through ClickFix attacks is targeting macOS users to steal cryptocurrency, passwords, and Apple Keychain data. The infostealer campaign combines social engineering with credential harvesting.
A former NSA official has warned against connecting water infrastructure controllers to the internet following suspected Iranian cyberattacks on U.S. water systems.
Security researchers scanning Polish government websites discovered critical vulnerabilities that could expose courts, hospitals, and airports to cyberattacks. The vulnerabilities stem from common software used to manage and display web content.