ShinyHunters hijacks Clop, fake LastPass kills security tools, trusted npm release carries malware
MentionsCl0pShinyHunters
Runs 7:18. Streams from traffic.libsyn.com only when you press play.
ShinyHunters hijacks Clop's own leak site Fake LastPass installers kill security tools Trusted npm release carries GHAPPIER malware Huge thanks to our episode sponsor, Nudge Security Here's a question that might make you sweat…how many AI agents are running in your org right now? Not sure? You're not alone. But, we have good news. Nudge Security now includes AI Agent Discovery, in addition to Day One discovery of every other AI and SaaS app. For each agent, you'll see who built it, what it's connected to, and risks like destructive permissions.
Show notes from Defense in Depth.
Explained
The technology and terms in this story. Learn more
- TechnologynpmThe package registry for JavaScript: millions of open-source libraries that projects install automatically.
- AttackData extortionStealing data and threatening to publish it unless the victim pays.
- TechnologyAI agentAn AI model that acts on its own: it plans steps, uses tools and takes actions, not just answers.