Mobile Security

<div class="hs-featured-image-wrapper"> <a href="https://www.sonatype.com/blog/open-source-malware-index-q4-2025-automation-overwhelms-ecosystems" title="" class="hs-featured-image-link"> <img decoding="async" src="https://www.sonatype.com/hubfs/blog_osmiQ42025_.png" alt="Title card image of Sonatype's Open Source Malware Index series" class="hs-featured-image" style="width:auto !important; max-width:50%; float:left; margin:0 15px 15px 0;"> </a> </div><p>As open source software continues to <a href="https://www.sonatype.com/state-of-the-software-supply-chain/2024/scale" style="text-decoration: none;">fortify modern applications</a>, attackers are finding new and increasingly efficient ways to exploit the trust developers place in public ecosystems.</p><p><img decoding="async" src="https://track.hubspot.com/__ptq.gif?a=1958393&amp;k=14&amp;r=https%3A%2F%2Fwww.sonatype.com%2Fblog%2Fopen-source-malware-index-q4-2025-automation-overwhelms-ecosystems&amp;bu=https%253A%252F%252Fwww.sonatype.com%252Fblog&amp;bvt=rss" alt="" width="1" height="1" style="min-height:1px!important;width:1px!important;border-width:0!important;margin-top:0!important;margin-bottom:0!important;margin-right:0!important;margin-left:0!important;padding-top:0!important;padding-bottom:0!important;padding-right:0!important;padding-left:0!important; "></p><div class="spu-placeholder" style="display:none"></div><div class="addtoany_share_save_container addtoany_content addtoany_content_bottom"><div class="a2a_kit a2a_kit_size_20 addtoany_list" data-a2a-url="https://securityboulevard.com/2026/01/open-source-malware-index-q4-2025-automation-overwhelms-ecosystems/" data-a2a-title="Open Source Malware Index Q4 2025: Automation Overwhelms Ecosystems"><a class="a2a_button_twitter" href="https://www.addtoany.com/add_to/twitter?linkurl=https%3A%2F%2Fsecurityboulevard.com%2F2026%2F01%2Fopen-source-malware-index-q4-2025-automation-overwhelms-ecosystems%2F&amp;linkname=Open%20Source%20Malware%20Index%20Q4%202025%3A%20Automation%20Overwhelms%20Ecosystems" title="Twitter" rel="nofollow noopener" target="_blank"></a><a class="a2a_button_linkedin" href="https://www.addtoany.com/add_to/linkedin?linkurl=https%3A%2F%2Fsecurityboulevard.com%2F2026%2F01%2Fopen-source-malware-index-q4-2025-automation-overwhelms-ecosystems%2F&amp;linkname=Open%20Source%20Malware%20Index%20Q4%202025%3A%20Automation%20Overwhelms%20Ecosystems" title="LinkedIn" rel="nofollow noopener" target="_blank"></a><a class="a2a_button_facebook" href="https://www.addtoany.com/add_to/facebook?linkurl=https%3A%2F%2Fsecurityboulevard.com%2F2026%2F01%2Fopen-source-malware-index-q4-2025-automation-overwhelms-ecosystems%2F&amp;linkname=Open%20Source%20Malware%20Index%20Q4%202025%3A%20Automation%20Overwhelms%20Ecosystems" title="Facebook" rel="nofollow noopener" target="_blank"></a><a class="a2a_button_reddit" href="https://www.addtoany.com/add_to/reddit?linkurl=https%3A%2F%2Fsecurityboulevard.com%2F2026%2F01%2Fopen-source-malware-index-q4-2025-automation-overwhelms-ecosystems%2F&amp;linkname=Open%20Source%20Malware%20Index%20Q4%202025%3A%20Automation%20Overwhelms%20Ecosystems" title="Reddit" rel="nofollow noopener" target="_blank"></a><a class="a2a_button_email" href="https://www.addtoany.com/add_to/email?linkurl=https%3A%2F%2Fsecurityboulevard.com%2F2026%2F01%2Fopen-source-malware-index-q4-2025-automation-overwhelms-ecosystems%2F&amp;linkname=Open%20Source%20Malware%20Index%20Q4%202025%3A%20Automation%20Overwhelms%20Ecosystems" title="Email" rel="nofollow noopener" target="_blank"></a><a class="a2a_dd addtoany_share_save addtoany_share" href="https://www.addtoany.com/share"></a></div></div><p class="syndicated-attribution">*** This is a Security Bloggers Network syndicated blog from <a href="https://www.sonatype.com/blog">2024 Sonatype Blog</a> authored by <a href="https://securityboulevard.com/author/0/" title="Read other posts by Sonatype Security Research Team">Sonatype Security Research Team</a>. Read the original post at: <a href="https://www.sonatype.com/blog/open-source-malware-index-q4-2025-automation-overwhelms-ecosystems">https://www.sonatype.com/blog/open-source-malware-index-q4-2025-automation-overwhelms-ecosystems</a> </p>

<p>The recently disclosed ServiceNow vulnerability should terrify every CISO in America. <a href="https://nvd.nist.gov/vuln/detail/CVE-2025-12420">CVE-2025-12420</a>, dubbed “BodySnatcher,” represents everything wrong with how we’re deploying AI in the enterprise today. An unauthenticated attacker—someone who has never logged into your system, sitting anywhere in the world—can impersonate your administrators using nothing more than an email address. They bypass your multi-factor authentication, sidestep your single sign-on, and weaponize your own AI agents to create backdoor accounts with full privileges.</p><p>With a CVSS score of 9.3 out of 10, this vulnerability affected ServiceNow’s Now Assist AI platform—software used by nearly half of Fortune 100 companies. The attack vector? A hardcoded, platform-wide secret combined with account-linking logic that trusted nothing more than an email address. An attacker sitting halfway across the globe with zero credentials could impersonate an administrator and execute AI agents to override security controls.</p><h3><strong>The AI Gold Rush Is Breaking Security</strong></h3><p>Companies are shipping AI features because AI is the current marketing imperative, not because customers are demanding these capabilities or because the security implications have been properly considered. Executives see competitors announcing AI initiatives and panic. Product managers get mandates to “add AI” to roadmaps. Developers face crushing pressure to deploy agentic systems on impossibly short timelines.</p><p>The result is predictable. Security becomes an afterthought. Authentication mechanisms get implemented hastily. Authorization boundaries blur. And suddenly, your enterprise AI agent—designed to “simplify workflows”—becomes a remote-controlled attack vector that bypasses every security control you’ve spent years building.</p><p>Default configurations in AI platforms routinely enable second-order prompt injection attacks, where attackers embed malicious instructions in data fields that higher-privileged AI agents later process. Agent discovery features create attack vectors when agents are improperly configured. These are fundamental design failures born from rushing AI to market.</p><p>The uncomfortable truth is that most organizations deploying AI don’t understand what they’re deploying. Executives don’t grasp that agentic AI systems require fundamentally different security models. Developers don’t realize that the “helpful” AI agent they just connected to their database is now a privileged execution path that attackers can hijack. Security teams discover these AI deployments after the fact, when it’s too late to architect proper controls.</p><h3><strong>The Agentic AI Nightmare and MCP’s Authentication Gap</strong></h3><p>Agentic AI systems represent a quantum leap in attack surface. Unlike traditional APIs, AI agents make decisions, chain together complex workflows, and interact with multiple systems autonomously. When you give an AI agent the ability to “help users manage their accounts,” you’ve created an autonomous system with privileges that attackers can manipulate through prompt injection or broken authentication.</p><p>The risks multiply with protocols like Model Context Protocol (MCP), which allows AI systems to connect to various data sources and tools. MCP servers can expose file systems, databases, and internal tools to AI agents—often without requiring authentication or authorization at the MCP layer itself. The assumption is that authentication happens elsewhere in the stack. But assumptions kill security programs.</p><p>When an attacker hijacks an AI agent’s identity, they gain access to everything connected through MCP—customer databases, internal APIs, file systems—all without directly authenticating to those systems. The AppOmni researchers demonstrated exactly this attack pattern with ServiceNow, showing how low-privileged users could embed malicious instructions that higher-privileged AI agents would faithfully execute.</p><h3><strong>What We Must Do Now</strong></h3><p>Organizations need to take immediate action:</p><ul><li><strong>Halt the AI feature factory.</strong> Every AI initiative needs a security review before deployment, not after. Deploying broken AI features damages your company more than not having AI features at all.</li><li><strong>Implement zero-trust architecture for AI agents.</strong> AI agents should never inherit ambient privileges—the privileges of whatever user or system happens to be hosting them. Every operation requires explicit authentication and authorization. MCP servers need authentication mechanisms. AI agents need scoped credentials that follow least privilege. Audit every action an AI agent takes.</li><li><strong>Eliminate dangerous default configurations.</strong> Stop shipping products with permissive defaults. Agent discovery should be disabled by default. MCP servers should require authentication by default. Make security the default and let users consciously choose to relax controls if they understand the risks.</li><li><strong>Build defense in depth.</strong> Assume attackers will compromise your AI agent. Use separate service accounts with limited scopes. Monitor agent behavior for anomalies. Implement rate limiting and output validation. Create kill switches. Build these controls into your architecture from day one.</li><li><strong>Establish lifecycle management.</strong> Organizations are deploying AI agents and forgetting about them. Unused agents with elevated privileges become dormant attack vectors. De-provision stagnant agents. Audit which agents exist, what privileges they have, and whether they’re needed.</li></ul><h3><strong>The Bottom Line</strong></h3><p>The BodySnatcher vulnerability reveals how fundamentally broken our approach to AI security has become. We’re deploying autonomous agents with elevated privileges, connecting them to sensitive data through protocols that assume authentication happens elsewhere, and rushing everything to market because competitors are doing the same thing.</p><p>Security cannot be retrofitted. You cannot ship broken authentication and patch it later. You cannot deploy AI agents with unbounded privileges and hope nobody notices. You cannot assume protocols like MCP will be secure simply because they’re new.</p><p>The choice is stark: either we slow down the AI deployment frenzy and build these systems correctly, or we continue discovering 9.3 severity vulnerabilities that let unauthenticated attackers remote-control our enterprises. The AI gold rush is breaking security. It’s time to choose security over time-to-market before the next BodySnatcher emerges—and the attackers who exploit it won’t responsibly disclose it first.</p><div class="spu-placeholder" style="display:none"></div><div class="addtoany_share_save_container addtoany_content addtoany_content_bottom"><div class="a2a_kit a2a_kit_size_20 addtoany_list" data-a2a-url="https://securityboulevard.com/2026/01/were-moving-too-fast-why-ais-race-to-market-is-a-security-disaster/" data-a2a-title="We’re Moving Too Fast: Why AI’s Race to Market Is a Security Disaster"><a class="a2a_button_twitter" href="https://www.addtoany.com/add_to/twitter?linkurl=https%3A%2F%2Fsecurityboulevard.com%2F2026%2F01%2Fwere-moving-too-fast-why-ais-race-to-market-is-a-security-disaster%2F&amp;linkname=We%E2%80%99re%20Moving%20Too%20Fast%3A%20Why%20AI%E2%80%99s%20Race%20to%20Market%20Is%20a%20Security%20Disaster" title="Twitter" rel="nofollow noopener" target="_blank"></a><a class="a2a_button_linkedin" href="https://www.addtoany.com/add_to/linkedin?linkurl=https%3A%2F%2Fsecurityboulevard.com%2F2026%2F01%2Fwere-moving-too-fast-why-ais-race-to-market-is-a-security-disaster%2F&amp;linkname=We%E2%80%99re%20Moving%20Too%20Fast%3A%20Why%20AI%E2%80%99s%20Race%20to%20Market%20Is%20a%20Security%20Disaster" title="LinkedIn" rel="nofollow noopener" target="_blank"></a><a class="a2a_button_facebook" href="https://www.addtoany.com/add_to/facebook?linkurl=https%3A%2F%2Fsecurityboulevard.com%2F2026%2F01%2Fwere-moving-too-fast-why-ais-race-to-market-is-a-security-disaster%2F&amp;linkname=We%E2%80%99re%20Moving%20Too%20Fast%3A%20Why%20AI%E2%80%99s%20Race%20to%20Market%20Is%20a%20Security%20Disaster" title="Facebook" rel="nofollow noopener" target="_blank"></a><a class="a2a_button_reddit" href="https://www.addtoany.com/add_to/reddit?linkurl=https%3A%2F%2Fsecurityboulevard.com%2F2026%2F01%2Fwere-moving-too-fast-why-ais-race-to-market-is-a-security-disaster%2F&amp;linkname=We%E2%80%99re%20Moving%20Too%20Fast%3A%20Why%20AI%E2%80%99s%20Race%20to%20Market%20Is%20a%20Security%20Disaster" title="Reddit" rel="nofollow noopener" target="_blank"></a><a class="a2a_button_email" href="https://www.addtoany.com/add_to/email?linkurl=https%3A%2F%2Fsecurityboulevard.com%2F2026%2F01%2Fwere-moving-too-fast-why-ais-race-to-market-is-a-security-disaster%2F&amp;linkname=We%E2%80%99re%20Moving%20Too%20Fast%3A%20Why%20AI%E2%80%99s%20Race%20to%20Market%20Is%20a%20Security%20Disaster" title="Email" rel="nofollow noopener" target="_blank"></a><a class="a2a_dd addtoany_share_save addtoany_share" href="https://www.addtoany.com/share"></a></div></div>

<p>Delinea, a provider of a privileged access management (PAM) platform, today revealed it will acquire StrongDM, a provider of a platform for authorizing access to IT infrastructure.</p><p>The core technology developed by StrongDM is used mainly by DevOps and engineering teams to programmatically reduce cybersecurity risks by eliminating the need to grant long-term access to IT infrastructure. Instead, authorization to access IT infrastructure is granted on a just-in-time basis to both human administrators and non-human identities attached to third-party applications.</p><p>Phil Calvin, chief product officer for Delinea, said StrongDM extends the scope of the existing identity security portfolio to IT infrastructure to provide a spectrum of offerings for securing identities across a continuum of scenarios.</p><p>Existing Delinea offerings address the need to secure sessions by adding an ability to secure identity access in near real time, which, in addition to being applied to IT infrastructure, can also be extended to non-human identities such as artificial intelligence (AI) agents, noted Calvin. Managing identities in the age of AI agents will prove to be especially challenging for organizations that will soon be deploying thousands of them running on a wide range of heterogeneous platforms, he added.</p><p>Unfortunately, most cybersecurity teams, in the absence of any centralized method for managing identity, are usually unable to see what privileges have been assigned. It’s usually only during the forensics phase of a breach that they discover privileges were overprovisioned. The Delinea platform makes it possible for cybersecurity teams to instead review privileges to ensure the blast radius of any potential breach is limited, noted Calvin.</p><p>Once the deal is formally closed, Delinea will begin working on integrating the two product portfolios, which include a Delinea Iris AI framework that identifies threats and applies guardrails in real time. Collectively, the Delinea portfolio will now support both ephemeral and credential-based access models while enabling a deliberate transition toward a zero standing privilege (ZSP) model.</p><p>For all intents and purposes, <a href="https://techstrong.tv/videos/interviews/delineas-art-gilliland-on-increased-identity-security-spending-in-2025" target="_blank" rel="noopener">identity is now the perimeter that cybersecurity teams are expected to defend</a>. The challenge is that many individuals often have multiple identities associated with different job functions. More challenging still, many of the individuals accessing applications and services are not employees but rather temporary contractors.</p><p>Cybercriminals are, of course, trying to <a href="https://securityboulevard.com/2025/11/ai-attack-automation-is-here-and-its-coming-for-your-credentials/" target="_blank" rel="noopener">steal as many credentials as possible</a>. In many cases, cybercriminals log into applications much like any other normal user for months before starting to exfiltrate data and inject malware. Many organizations might not even realize credentials have been stolen until months after the fact.</p><p>It’s not clear what will be needed to encourage more organizations to unify the management of access and authorization in a way that is tied to specific sets of credentials, but the sooner they do, the more likely the overall cybersecurity posture of the organization will improve. In the meantime, cybersecurity teams should assume that most of the credentials being used have been compromised, which, at the very least, means they should be regularly rotated as part of a larger effort to manage the lifecycle of both human and non-human identities.</p><div class="spu-placeholder" style="display:none"></div><div class="addtoany_share_save_container addtoany_content addtoany_content_bottom"><div class="a2a_kit a2a_kit_size_20 addtoany_list" data-a2a-url="https://securityboulevard.com/2026/01/delinea-acquries-strongdm-to-secure-access-to-it-infrastructure/" data-a2a-title="Delinea Acquires StrongDM to Secure Access to IT Infrastructure"><a class="a2a_button_twitter" href="https://www.addtoany.com/add_to/twitter?linkurl=https%3A%2F%2Fsecurityboulevard.com%2F2026%2F01%2Fdelinea-acquries-strongdm-to-secure-access-to-it-infrastructure%2F&amp;linkname=Delinea%20Acquires%20StrongDM%20to%20Secure%20Access%20to%20IT%20Infrastructure" title="Twitter" rel="nofollow noopener" target="_blank"></a><a class="a2a_button_linkedin" href="https://www.addtoany.com/add_to/linkedin?linkurl=https%3A%2F%2Fsecurityboulevard.com%2F2026%2F01%2Fdelinea-acquries-strongdm-to-secure-access-to-it-infrastructure%2F&amp;linkname=Delinea%20Acquires%20StrongDM%20to%20Secure%20Access%20to%20IT%20Infrastructure" title="LinkedIn" rel="nofollow noopener" target="_blank"></a><a class="a2a_button_facebook" href="https://www.addtoany.com/add_to/facebook?linkurl=https%3A%2F%2Fsecurityboulevard.com%2F2026%2F01%2Fdelinea-acquries-strongdm-to-secure-access-to-it-infrastructure%2F&amp;linkname=Delinea%20Acquires%20StrongDM%20to%20Secure%20Access%20to%20IT%20Infrastructure" title="Facebook" rel="nofollow noopener" target="_blank"></a><a class="a2a_button_reddit" href="https://www.addtoany.com/add_to/reddit?linkurl=https%3A%2F%2Fsecurityboulevard.com%2F2026%2F01%2Fdelinea-acquries-strongdm-to-secure-access-to-it-infrastructure%2F&amp;linkname=Delinea%20Acquires%20StrongDM%20to%20Secure%20Access%20to%20IT%20Infrastructure" title="Reddit" rel="nofollow noopener" target="_blank"></a><a class="a2a_button_email" href="https://www.addtoany.com/add_to/email?linkurl=https%3A%2F%2Fsecurityboulevard.com%2F2026%2F01%2Fdelinea-acquries-strongdm-to-secure-access-to-it-infrastructure%2F&amp;linkname=Delinea%20Acquires%20StrongDM%20to%20Secure%20Access%20to%20IT%20Infrastructure" title="Email" rel="nofollow noopener" target="_blank"></a><a class="a2a_dd addtoany_share_save addtoany_share" href="https://www.addtoany.com/share"></a></div></div>

ctrl:cyber has acquired elevenM, strengthening its end-to-end sovereign capability and national footprint. The acquisition brings together two organisations with closely aligned values and deep exper… [+2543 chars]

Google LLC today debuted a tool called Personal Intelligence that will enable consumers to tailor its Gemini chatbot to their preferences. The tool will initially be available to a limited number of… [+4234 chars]

Artificial intelligence-native security platform startup depthfirst Inc. revealed today that it had raised $40 million in new funding to support its research and development, go-to-market efforts and… [+4262 chars]

President Donald Trumps nominee to lead the NSA and U.S. Cyber Command comes from a less traditional background than past military leaders who have held the dual-hatted role, though former officials … [+5165 chars]

Belgian cybersecurity company Aikido Security NV today announced that it had raised $60 million in new funding at a $1 billion valuation to further enhance its unified platform for code, cloud and ru… [+4072 chars]

In the wake of the broad-daylight murder of Renee Good by a deputized federal officer in Minneapolis, there have been some increasingly loud cries to eliminate ICE, both from elected officials and fr… [+4149 chars]

Malcolm Dash moved to Israel from Cape Town, South Africa, where he had studied business and economics at the University of Cape Town. He served in the Israel Defense Forces, which included combat se… [+3146 chars]

CONWAY, Ark., Jan. 14, 2026 (GLOBE NEWSWIRE) -- Home BancShares, Inc. (NYSE: HOMB) (Home or the Company), parent company of Centennial Bank, released quarterly earnings today. Quarterly Highlights … [+141339 chars]

A man works on the electronics of Jules, a humanoid robot from Hanson Robotics using AI, at the recent International Telecommunication Union AI for Good Global Summit in Geneva - Copyright AFP/File V… [+3041 chars]

Ukrainian President Volodymyr Zelensky is expected to head to Vilnius for the two-day summit to make the case that Kyiv has earned the right to join - Copyright AFP YAMIL LAGE Vilnius is testing a d… [+5574 chars]

Delivered Full Year 2025 Growth of +191% in Net Income from continuing operations, +42% in Adjusted Net Income from continuing operations and +12% in Adjusted EBITDA from continuing operations Annou… [+62326 chars]

The screaming woman who was filmed being pulled from her car by ICE agents in Minneapolis has been identified as a tech guru and LGBT and racial justice activist who describes herself as a “friendly … [+6066 chars]

Transaction seeks to enhance Missions position in the North American avocado category with expanded supply across Mexico and California Vertically integrated platform with sourcing security and prod… [+23361 chars]

Shipping tech company Bluspark Global reportedly resolved security issues in its shipping and supply chain platform Bluvoyix.The company did so after being notified of the vulnerabilities by security… [+2252 chars]

Skild AI Inc., a startup that develops artificial intelligence software for robots, has raised $1.4 billion from a group of prominent investors. Todays funding announcement comes about a month after… [+4726 chars]

from the abolish-ice dept U.S. Immigration and Customs Enforcement (ICE) has a new budget under the current administration, and they are going on a surveillance tech shopping spree. Standing at $28.… [+17470 chars]

CAMPBELL, Calif., Jan. 14, 2026 (GLOBE NEWSWIRE) -- Arteris, Inc. (Nasdaq: AIP), a leading technology provider for accelerating semiconductor creation in the AI era, today announced it has closed its… [+4566 chars]

OTTAWA Quebec Premier François Legault unexpectedly announced on Wednesday he would soon be resigning as leader just as his party, the Coalition Avenir Québec (CAQ), is expected to face a crushing de… [+4602 chars]

Tim Hardwick (Hacker News): Apple and other smartphone manufacturers are resisting an Indian government proposal that would require them to hand over source code for security review, reports Reuters… [+1318 chars]

When three Victorian families hired the same au pair, none expected the experience would spiral into what they now all describe as a nightmare. All three found Mary, whose name has been changed to p… [+7451 chars]

THIS CONTENT IS RESERVED FOR SUBSCRIBERS ONLY Subscribe now to read the latest news in your city and across Canada. <ul><li>Exclusive articles from Barbara Shecter, Joe O'Connor, Gabriel Friedman, … [+8446 chars]

Photo courtesy of Social Rescue. Opinions expressed by Digital Journal contributors are their own. Nothing more worrisome than not being able to log into your Instagram. One instantly loses access… [+6819 chars]