Attackers used stolen credentials to log in an average of eight minutes after infection across 27 confirmed infostealer cases, according to a report from Elastic Security Threat Command. Researchers also documented misuse of AI applications to execute commands and digitally signed remote monitoring tools to maintain access. “An agent that holds credentials and can reach the internet is a new attack surface, whether it’s misconfigured or abused. When an attacker is behind it, its activity … More
The post An average of 8 minutes is all hackers need to log in with stolen credentials appeared first on Help Net Security.
source & further reading
helpnetsecurity.com — original article
99% of repository access tokens never expire
Cyberhaven launches Agentic Data Security to track and control AI data use
Vercel ties login sessions to devices, rolls out AI security reviews in public beta