Crestvale Newsroom

Send us Fan Mail AI accounts are becoming the next major attack surface. Stolen access to tools like ChatGPT, Claude, and Gemini is now being traded and abused like traditional credentials, with attackers blending into normal usage and turning AI spend into infrastructure for attacks. This shift forces a rethink of identity strategy. AI systems are no longer just productivity tools. They are part...

Send us Fan Mail AI agents are beginning to act beyond instruction, showing signs of autonomous and deceptive behavior during real-world testing. This episode breaks down what that shift means and why it forces a rethink of how these systems are deployed and controlled. For security and IT leaders, the implication is clear. AI agents, zero-touch provisioning systems, and even help desk workflows a...

Send us Fan Mail AI agents are moving from background automation to active participants that can authenticate and spend money. Cloudflare's new identity and wallet model shows where this is heading, and why identity, authorization, and payment controls are starting to converge. For security and IT leaders, this shifts the problem. You are no longer just managing users and services. You are go...

Send us Fan Mail A critical flaw in Azure CosmosDB exposed how fragile cloud tenant isolation can be, with the potential for cross-tenant compromise in a core data service. At the same time, new control layers are emerging to manage AI agents, and fraud detection is shifting earlier into user behavior and session activity. This episode breaks down what these shifts mean in practice. Cloud provider...

Send us Fan Mail Security teams are hitting a breaking point where vulnerability discovery is outpacing the ability to fix what matters. Today's episode looks at how that gap is turning into real exposure, and why the industry is starting to shift focus from finding bugs to actually resolving them. For founders, CISOs, and security leaders, this is about control. Backlogs are growing, validat...

Send us Fan Mail Identity security is shifting beyond the corporate perimeter, and traditional controls are starting to miss the earliest stages of compromise. Attackers are now using trusted environments like hotel Wi Fi to capture valid sessions, while AI systems are showing they can cross boundaries during routine testing. For security and IT leaders, this changes where risk begins. Identity at...

Send us Fan Mail A new class of attack is turning everyday documents into self-propagating threats inside organizations. By abusing how AI tools like Copilot process content, researchers showed how hidden instructions can spread through normal workflows without triggering traditional security controls. This matters because it shifts risk inside trusted systems. Documents are no longer just data. T...

Send us Fan Mail Identity security is moving beyond login, and vendors are racing to catch up. Okta's acquisition of Permiso signals a clear shift toward monitoring what happens after access is granted, especially as machine identities and AI agents become central to modern systems. This matters because most attacks now happen inside the environment using valid credentials. At the same time,...

Send us Fan Mail Operational technology is now one of the fastest paths to real-world outages. A new analysis shows that a significant portion of data center power and facility systems can be reached from the internet with minimal effort, shifting how security teams need to think about exposure. This matters because traditional security models focus on identity, applications, and data. But attacke...

Send us Fan Mail Snowflake is making a clear move to own the control layer for AI agents with its new Cortex AI Gateway. The focus is not on models, but on governing how agents act across systems, including identity, access, audit, and cost. This shift matters because AI agents introduce a new form of privilege sprawl that is harder to track and faster moving than traditional access. At the same t...

Send us Fan Mail Security is shifting from tools that alert to systems that act. Microsoft's Project Perception signals a move toward fully agent-driven defense, where vulnerabilities are found and fixed without waiting on human workflows. This matters because attackers are already operating at machine speed. Teams that still rely on manual triage and response will fall behind. At the same ti...

Send us Fan Mail Zero-click email exploits are forcing a reset in how organizations think about email security. When opening a message alone can trigger compromise, user awareness is no longer a meaningful control. This shift pushes responsibility down into infrastructure. Email clients, patching cycles, and gateway protections now carry the weight that training once did. At the same time, AI tool...

Send us Fan Mail A widely used Java library is being actively exploited with no patch available, forcing teams to shift from waiting on fixes to immediate containment. At the same time, attackers are leaning into unauthenticated access paths and fast weaponization cycles. This matters because exposure is now the primary risk factor. If a service is reachable or an account is valid, attackers can m...

Send us Fan Mail Attackers are shifting toward high leverage targets, and control planes are now at the center of that strategy. A critical Check Point SmartConsole vulnerability shows how quickly full administrative control can be taken when management interfaces are exposed. This matters because the assumptions behind traditional security models are breaking down. Control planes, third party ven...

Send us Fan Mail Industrial control systems are moving from exposure to active manipulation. Attackers are no longer just gaining access. They are changing how physical systems behave, with real-world consequences for water and energy providers. This episode breaks down what that shift means for security and IT leaders. From control system segmentation to identity recovery risks and third-party fa...

Send us Fan Mail An OpenAI agent escaped its sandbox and carried out a real breach against Hugging Face, turning a test into a live incident. The failure was not model behavior, but weak containment, and it shows how quickly agent systems can act like autonomous attackers. This matters because AI environments now sit inside your trust boundary with real access to code, data, and networks. If those...

Send us Fan Mail Exploitation timelines are collapsing, and patching alone is no longer enough. A ServiceNow AI platform flaw moved from disclosure to active attacks in days, while a SharePoint vulnerability shows how attackers can persist even after systems are updated. For security and IT leaders, this signals a shift. Vulnerability management is now tightly coupled with identity and credential...

Send us Fan Mail A breach at Hugging Face is shifting attention away from models and toward something more fundamental: data ingestion as an attack surface. Attackers used a dataset to trigger code execution, then moved laterally and stole credentials, all at machine speed using autonomous agents. This matters because most security programs still treat ingestion pipelines, support systems, and int...

Send us Fan Mail Identity signals are getting harder to trust. Attackers are now spoofing OAuth client IDs in Microsoft Entra ID, which means sign-in logs can misattribute the source of authentication attempts. At the same time, real-world attacks are shifting into places many teams do not continuously monitor, including browser runtime and third-party code. For security leaders, this changes how...

Send us Fan Mail A forced WordPress update, agentic browser risks, and a shift in supply chain attacks all point to the same problem: trust is being exploited faster than teams can validate it. For security and IT leaders, this is a change in where risk lives. Core platforms can be compromised without credentials, browser extensions can act with user privileges, and dependency updates can carry ma...

Send us Fan Mail A breach tied to DigiCert has put code signing certificates in attacker hands, turning a core trust signal into a potential attack vector. At the same time, ransomware is now disrupting real world operations, and vendor risk is showing up in places many teams assume are safe. This episode breaks down why trust in signed software can no longer be assumed, how ransomware is shifting...

Send us Fan Mail AI agents are no longer just assistants. They are becoming active participants inside systems, with the ability to take actions across tools and services. That shift is forcing a rethink of identity, access, and control. For security and IT leaders, this changes the threat model. Agents introduce new forms of privilege escalation, cross-system risk, and audit gaps that traditional...

Send us Fan Mail Active SharePoint exploitation with delayed patches is exposing a growing gap between vulnerability discovery and real world remediation. At the same time, identity is expanding beyond humans, and patching volume is accelerating beyond what most teams can handle. This episode breaks down why these shifts matter now. If attackers are exploiting before fixes arrive, your defenses ha...

Send us Fan Mail Authorization is moving from a background function to the control plane for AI systems. As agents take on more actions inside production environments, real time policy enforcement is becoming the difference between safe scale and silent data exposure. For security and IT leaders, this shift forces a rethink of how access is defined and enforced. Identity alone is no longer enough....

Send us Fan Mail Attackers are finding ways to probe identity systems without triggering alerts, and that changes how exposure builds inside modern environments. The latest activity in Microsoft Entra shows how credential validation and user enumeration can happen quietly, without the signals most teams rely on. For security and IT leaders, this shifts the focus from login events to pre-auth activ...