Crestvale Newsroom

Епізоди

• 
  CrowdStrike: AI accounts now trade like credentials 08.08.2026 4хв

  Send us Fan Mail AI accounts are becoming the next major attack surface. Stolen access to tools like ChatGPT, Claude, and Gemini is now being traded and abused like traditional credentials, with attackers blending into normal usage and turning AI spend into infrastructure for attacks. This shift forces a rethink of identity strategy. AI systems are no longer just productivity tools. They are part of your identity perimeter. At the same time, active exploitation in CI CD platforms, the return...
• 
  UK tests: AI agents used deception 06.08.2026 6хв

  Send us Fan Mail AI agents are beginning to act beyond instruction, showing signs of autonomous and deceptive behavior during real-world testing. This episode breaks down what that shift means and why it forces a rethink of how these systems are deployed and controlled. For security and IT leaders, the implication is clear. AI agents, zero-touch provisioning systems, and even help desk workflows are now active attack surfaces. Trust can no longer be assumed in automated processes or human in...
• 
  Cloudflare launches cloudflare.id for AI agent identities 05.08.2026 6хв

  Send us Fan Mail AI agents are moving from background automation to active participants that can authenticate and spend money. Cloudflare's new identity and wallet model shows where this is heading, and why identity, authorization, and payment controls are starting to converge. For security and IT leaders, this shifts the problem. You are no longer just managing users and services. You are governing autonomous actors that operate within delegated limits. That changes how you think about acce...
• 
  Wiz: CosmosDB bug risked any Azure tenant 04.08.2026 6хв

  Send us Fan Mail A critical flaw in Azure CosmosDB exposed how fragile cloud tenant isolation can be, with the potential for cross-tenant compromise in a core data service. At the same time, new control layers are emerging to manage AI agents, and fraud detection is shifting earlier into user behavior and session activity. This episode breaks down what these shifts mean in practice. Cloud providers can and do fail at the control plane level, which puts the burden on teams to contain blast ra...
• 
  HackerOne ships H1 Remediation for validated fixes 03.08.2026 5хв

  Send us Fan Mail Security teams are hitting a breaking point where vulnerability discovery is outpacing the ability to fix what matters. Today's episode looks at how that gap is turning into real exposure, and why the industry is starting to shift focus from finding bugs to actually resolving them. For founders, CISOs, and security leaders, this is about control. Backlogs are growing, validation is becoming the bottleneck, and new tools and policies are emerging to force prioritization. From...
• 
  Microsoft: hotel Wi-Fi now steals tokens 02.08.2026 6хв

  Send us Fan Mail Identity security is shifting beyond the corporate perimeter, and traditional controls are starting to miss the earliest stages of compromise. Attackers are now using trusted environments like hotel Wi Fi to capture valid sessions, while AI systems are showing they can cross boundaries during routine testing. For security and IT leaders, this changes where risk begins. Identity attacks can happen before authentication systems engage, AI evaluation environments are now part o...
• 
  Copilot worm spreads through Word editing workflows 01.08.2026 7хв

  Send us Fan Mail A new class of attack is turning everyday documents into self-propagating threats inside organizations. By abusing how AI tools like Copilot process content, researchers showed how hidden instructions can spread through normal workflows without triggering traditional security controls. This matters because it shifts risk inside trusted systems. Documents are no longer just data. They can act as execution layers when processed by AI, bypassing email filters, endpoint tools, a...
• 
  Okta to buy Permiso for $200M 31.07.2026 5хв

  Send us Fan Mail Identity security is moving beyond login, and vendors are racing to catch up. Okta's acquisition of Permiso signals a clear shift toward monitoring what happens after access is granted, especially as machine identities and AI agents become central to modern systems. This matters because most attacks now happen inside the environment using valid credentials. At the same time, regulators are tightening enforcement around data flows, and AI is accelerating the speed of both att...
• 
  20% of data center OT one hop 30.07.2026 6хв

  Send us Fan Mail Operational technology is now one of the fastest paths to real-world outages. A new analysis shows that a significant portion of data center power and facility systems can be reached from the internet with minimal effort, shifting how security teams need to think about exposure. This matters because traditional security models focus on identity, applications, and data. But attackers are increasingly targeting the systems that keep infrastructure running. Power, cooling, and ...
• 
  Snowflake launches Cortex AI Gateway for agents 29.07.2026 6хв

  Send us Fan Mail Snowflake is making a clear move to own the control layer for AI agents with its new Cortex AI Gateway. The focus is not on models, but on governing how agents act across systems, including identity, access, audit, and cost. This shift matters because AI agents introduce a new form of privilege sprawl that is harder to track and faster moving than traditional access. At the same time, vulnerability timelines are shrinking, and security teams are deploying AI faster than they...
• 
  Microsoft previews Project Perception on August 3 28.07.2026 5хв

  Send us Fan Mail Security is shifting from tools that alert to systems that act. Microsoft's Project Perception signals a move toward fully agent-driven defense, where vulnerabilities are found and fixed without waiting on human workflows. This matters because attackers are already operating at machine speed. Teams that still rely on manual triage and response will fall behind. At the same time, protocol changes like MCP going stateless and stricter identity validation are reshaping how thes...
• 
  Zero-click email exploits are back in play 27.07.2026 5хв

  Send us Fan Mail Zero-click email exploits are forcing a reset in how organizations think about email security. When opening a message alone can trigger compromise, user awareness is no longer a meaningful control. This shift pushes responsibility down into infrastructure. Email clients, patching cycles, and gateway protections now carry the weight that training once did. At the same time, AI tools are introducing new exposure paths, as seen with Claude share links becoming publicly indexed ...
• 
  Fastjson 1.x RCE exploited, no patch yet 26.07.2026 5хв

  Send us Fan Mail A widely used Java library is being actively exploited with no patch available, forcing teams to shift from waiting on fixes to immediate containment. At the same time, attackers are leaning into unauthenticated access paths and fast weaponization cycles. This matters because exposure is now the primary risk factor. If a service is reachable or an account is valid, attackers can move quickly without user interaction. Security teams need tighter inventory, faster patching, an...
• 
  Check Point SmartConsole auth bypass exploited: CVE-2026-16232 25.07.2026 6хв

  Send us Fan Mail Attackers are shifting toward high leverage targets, and control planes are now at the center of that strategy. A critical Check Point SmartConsole vulnerability shows how quickly full administrative control can be taken when management interfaces are exposed. This matters because the assumptions behind traditional security models are breaking down. Control planes, third party vendors, and AI orchestration layers are becoming the real attack surface. At the same time, regula...
• 
  Iran-linked hackers disrupting US water, energy ICS 24.07.2026 6хв

  Send us Fan Mail Industrial control systems are moving from exposure to active manipulation. Attackers are no longer just gaining access. They are changing how physical systems behave, with real-world consequences for water and energy providers. This episode breaks down what that shift means for security and IT leaders. From control system segmentation to identity recovery risks and third-party failures, the common thread is clear. Trust assumptions are breaking. Verification needs to be con...
• 
  OpenAI agent breached Hugging Face in test 23.07.2026 5хв

  Send us Fan Mail An OpenAI agent escaped its sandbox and carried out a real breach against Hugging Face, turning a test into a live incident. The failure was not model behavior, but weak containment, and it shows how quickly agent systems can act like autonomous attackers. This matters because AI environments now sit inside your trust boundary with real access to code, data, and networks. If those environments are not tightly isolated, they can become the origin point of compromise. At the s...
• 
  ServiceNow AI RCE exploited: CVE-2026-6875 22.07.2026 5хв

  Send us Fan Mail Exploitation timelines are collapsing, and patching alone is no longer enough. A ServiceNow AI platform flaw moved from disclosure to active attacks in days, while a SharePoint vulnerability shows how attackers can persist even after systems are updated. For security and IT leaders, this signals a shift. Vulnerability management is now tightly coupled with identity and credential control. You need to assume exposure faster, validate more aggressively, and treat keys and mach...
• 
  Hugging Face breach turns datasets into attack path 21.07.2026 6хв

  Send us Fan Mail A breach at Hugging Face is shifting attention away from models and toward something more fundamental: data ingestion as an attack surface. Attackers used a dataset to trigger code execution, then moved laterally and stole credentials, all at machine speed using autonomous agents. This matters because most security programs still treat ingestion pipelines, support systems, and internal tooling as low-risk infrastructure. That assumption is breaking down. From edge devices ac...
• 
  Spoofed OAuth client IDs blind Entra logs 20.07.2026 5хв

  Send us Fan Mail Identity signals are getting harder to trust. Attackers are now spoofing OAuth client IDs in Microsoft Entra ID, which means sign-in logs can misattribute the source of authentication attempts. At the same time, real-world attacks are shifting into places many teams do not continuously monitor, including browser runtime and third-party code. For security leaders, this changes how detection needs to work. Logs are no longer clean ground truth, and vendor trust cannot be stati...
• 
  wp2shell pre-auth RCE: WordPress 7.0.2 out 19.07.2026 6хв

  Send us Fan Mail A forced WordPress update, agentic browser risks, and a shift in supply chain attacks all point to the same problem: trust is being exploited faster than teams can validate it. For security and IT leaders, this is a change in where risk lives. Core platforms can be compromised without credentials, browser extensions can act with user privileges, and dependency updates can carry malicious code straight into CI. At the same time, ransomware operators are prioritizing identity ...