One certificate company's secret key was the number 4. Two prompts and 16 fixes so somebody else's security failure stops at your door this week.

Recent internet security incidents highlight the growing role of AI agents in both cyber offense and defense, due to their native computer capabilities and persistent investigative power. Access to AI service keys is now a valuable target, creating financial incentives for attackers. Despite a rough transition, this increased focus on AI-driven investigation promises a more secure internet by addressing long-standing vulnerabilities.

• Recent internet security issues include emergency PHP fixes, compromised certificate authority keys, and AI-assisted attacks.
• AI agents are becoming central to cyber offense and defense because they are native to computers and can investigate systems at scale.
• Access to AI accounts is valuable to attackers due to the potential to incur machine work costs on the user’s bill.
• The current situation, while challenging, could lead to a more secure internet by identifying and repairing long-standing weaknesses.
• The article provides tools for checking personal exposure, including prompts and actions for accounts and devices.
• It explains why AI access is worth stealing and details a defender investigation scenario.
• Four CISO talk tracks are included for communication with the board, CFO, engineering, and vendors.
  https://foxvector.com/articles/fedb5ded-d417-4457-ba91-c23924e9947c