Wake the F**k Up

Attackers recently targeted a managed-services giant using AI agents, impacting over 2,250 downstream Microsoft 365 tenants. At least 162 companies were confirmed breached. A single individual utilized an agent platform with approximately $5,000 in DeepSeek and Claude Code tokens to compromise more than 100 firms. Additionally, an AI gateway used in production distributed a credential stealer on PyPI, while two hosting platforms advised customers to rotate all secrets following these security incidents.