Microsoft’s Storm-3168 investigation shows attackers targeting cloud resources and recovery systems. Backups need their own identities, permissions, and safeguards.
Author Archives: James Bearden
AI Agents Can Go Off-Script: OpenAI’s 100+ Security Notifications Change the Conversation
OpenAI’s misalignment disclosures and third-party notifications show why businesses need permissions, monitoring, approval gates, and kill switches before deploying autonomous AI.
Hackers Are Installing Real IT Support Software. Would Your Employees Know the Difference?
Microsoft observed phishing attacks installing legitimate MSP360 and ScreenConnect tools for persistent remote access. The software was real. The support was not.