Daily News, July 10th - BlackCat sentencing

We begin with a stark reminder of insider threats, as a former ransomware negotiator receives a significant sentence for BlackCat attacks. The supply chain remains a critical vulnerability, highlighted by a malicious npm package compromising Injective Labs SDK and a new group, Helix, leveraging vishing and MFA abuse to target SharePoint data. We also discuss Iran's expanding cyber crosshairs, emphasizing that any internet-facing system is a potential target. Microsoft's swift action on a Windows Defender zero-day, "RoguePlanet," underscores the constant need for patching.Shifting to AI and automation, we explore Google Cloud Tech's guidance on agentic skills for developers and production architectures for AI agents, alongside Kaseya's insights on AI-driven automation for security operations during summer staffing shortages. However, we also address the emerging risk of AI agents as new identities that organizations are ill-equipped to manage, requiring a fundamentally different approach to identity and access management.Our practical takeaways for today include auditing your supply chain security, particularly for developer tools, and intensifying user training against vishing and MFA bypass techniques. Furthermore, evaluate AI automation for consistent security operations during staff shortages, but critically, begin developing a strategy for managing AI agent identities to prevent them from becoming your next insider threat.