All Issues | Identity Decoded

Hackers Shipped a Backdoored Claude Code Update. It Had Anthropic's Real Name on It.

The name on the update was real. The update wasn't. Now ask what that means for every AI tool you let into your computer.

identity-security

One Saved Password Just Dumped 594,000 Florida DMV Files Online

Florida blames one police employee's login. The real problem is every agency holding a key to your driver record.

identity-security

More Than 160 Companies Got Hacked by an App They Forgot They Approved

No password. No MFA. No person. One stolen app key opened at least 162 companies’ email, and many of them may never know what was read.

Microsoft 365

AI Isn’t Rogue. It Has Your Keys.

OpenAI’s models broke into Hugging Face with no malicious intent. The real failure was the access left lying around.

OpenAI

France's Tax Office Got Robbed With 30 Passwords. It Found Out When the Thief Bragged.

No zero-day. No genius. Just stolen passwords, missing MFA, and alarms nobody connected. Here's what France's official post-mortem reveals.

identity-security

This Malware Has No Boss. Four AIs Vote on What It Steals Next

CLOSEDQUORUM skips the command server entirely. It asks DeepSeek, Qwen, Mistral and Gemini what to do, and majority rules.

Zero Trust

Someone Just Let an AI Agent Hack Into a Database Completely on Its Own

Spain's data protection agency logged the first confirmed data breach carried out entirely by an AI agent — login, recon, exploitation, and data access, with no human steering any of it.

Zero Trust

AI Agents Just Broke Into 440 Companies in 48 Hours

A Russian-speaking threat actor pointed a swarm of AI agents at one PaperCut vulnerability — and beat human defenders to the finish line.

patch management

Someone Just Minted Themselves Admin Access to Thousands of Companies

A JFrog Artifactory bug lets attackers skip login entirely — and mint admin tokens for the software supply chain thousands of companies run on.

Software Supply Chain

Hackers Shipped a Backdoored Claude Code Update. It Had Anthropic's Real Name on It.

One Saved Password Just Dumped 594,000 Florida DMV Files Online

More Than 160 Companies Got Hacked by an App They Forgot They Approved

AI Isn’t Rogue. It Has Your Keys.

France's Tax Office Got Robbed With 30 Passwords. It Found Out When the Thief Bragged.

This Malware Has No Boss. Four AIs Vote on What It Steals Next

Someone Just Let an AI Agent Hack Into a Database Completely on Its Own

AI Agents Just Broke Into 440 Companies in 48 Hours

Someone Just Minted Themselves Admin Access to Thousands of Companies

STAY CONNECTED