AI Agents Are Rewriting the Rules of Lateral Movement
Security teams have traditionally treated movement between unrelated systems as a warning sign. An identity accesses a new environment, retrieves a credential, assumes a different role, or touches a resource it has…
Arista reported that an AI agent can exploit a flaw in VCO, using certificates and permissions to gain access from external sources. The agent's ability to discover credentials and switch tools allows it to move across systems. VCO's web interface and authentication certificates are exposed to attackers. The attack technique involves configuring certificate-based authentication for the Edge. Arista has fixed releases for affected trains but not for the latest. The vulnerability is actively exploited, and the blast radius extends beyond individual identities.
From the original article
6 min read at thehackernews.com
Security teams have spent decades asking whether an identity has too much access. AI agents raise a harder question: how can we determine which paths an autonomous system can discover, given the access it already has? A person may try several ways to complete a task.
thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.