All Issues | Identity Decoded

AI Agents Just Broke Into 440 Companies in 48 Hours

A Russian-speaking threat actor pointed a swarm of AI agents at one PaperCut vulnerability — and beat human defenders to the finish line.

patch management

Someone Just Minted Themselves Admin Access to Thousands of Companies

A JFrog Artifactory bug lets attackers skip login entirely — and mint admin tokens for the software supply chain thousands of companies run on.

Software Supply Chain

Someone Just Used AI to Break Into 10 Companies

A ransomware crew turned a free coding assistant into an attack tool — and it never knew the difference.

Software Supply Chain

I Won't Let My Kids on TikTok, Instagram Roblox. Here's the $400 Million Reason Why

An extra issue, off the usual format — on TikTok's $400M fine, Meta's $17.1B settlement, the Roblox lawsuits, and why I think age verification should be a condition of doing business, not a roadmap item.

tiktok

Your AI Assistant Is Spying for Strangers

Researchers turned Microsoft Copilot into a full reconnaissance tool using nothing but polite, innocent-sounding questions — and any AI assistant with broad access could do the same.

meta-hacking

Firefox's Master Key Was Sitting on GitHub

The signature that proves a Firefox update is real got exposed — and there's no way to know who saw it

Software Updates

Your AI Login Isn't Yours Anymore

Stolen and resold AI accounts are turning shared logins into a surveillance channel nobody notices

Account Takeover

Your Copilot Caught a Virus

A hidden instruction in one Word file just proved AI assistants will infect every document they touch next.

Microsoft Copilot

Your AI Code Reviewer Just Approved Malware It Never Saw

A hidden comment in a pull request is all it takes to hijack the AI gatekeeper your team trusts to ship safe code

Zero Trust