AI has redrawn the cyber battlefield. Adversaries are already automating every phase of the kill chain to strike faster, scale wider, and overwhelm defenders. Manual workflows and conversational assistants help teams move faster, but still bind them to human speed. Agentic AI changes the equation. It enables security teams to deputize trusted, mission-ready agents that reason, decide, and act on their behalf — at the speed of AI. The promise of agentic AI is clear.

On September 15, a new supply chain attack was identified that targeted the @ctrl/tinycolor and 150 other NPM packages. The attack scenario was similar to the one used in the s1ngularity and GhostActions campaigns. The threat actors combined a local environment secrets extraction with a malicious GitHub actions workflow injection in accessible projects. The compromised packages' structure has been detailed in blog posts by socket.dev and StepSecurity.

Microsoft Teams has become the standard tool for digital collaboration in companies, public institutions and organizations alike. The platform offers all the functions modern teams need: Chat, meetings, file storage, project collaboration and more – fundamentally changing the way we work together across states and countries. But despite all the enthusiasm, Teams is not without its drawbacks – especially when used without proper control.

The enterprise is undergoing the most profound technological shift since the dawn of the internet. Artificial intelligence is no longer a side project or a productivity boost — it has become the new operating model for today’s businesses. Autonomous agents are reshaping how work gets done. Within the next year, nearly every organization will depend on them for competitive advantage. At the same time, adversaries are weaponizing AI to move at unprecedented speed and scale.

According to Forbes Advisor, 46% of Americans reported having their passwords stolen in 2024. This highlights just how essential tools like password managers are for secure credential management. Password managers generate, store and autofill strong passwords and passkeys, helping users maintain strong password hygiene without needing to remember every login credential.

The most dangerous attackers don’t break in—they walk through your front door with stolen credentials. Traditional security infrastructure faces a fundamental challenge: advanced persistent threats remain undetected for an average of 287 days, operating within legitimate access boundaries while signature-based defenses remain blind to their activities. When attackers steal credentials or insiders go rogue, they appear as authorized users to existing security infrastructure.