AI Agents Create an Unseen Credential Surface That Exposes API Keys and Cloud Secrets
Trellix says normal AI-agent workflows can leak API keys and cloud secrets into logs, transcripts, and model context.
9
Stories per day · 30 days
4 RSS
Relatedai-agents2secrets2credential-exposure1credentials1oauth1owasp1prompt-context1prompt-injection1
7 stories, newest first · one card per story
Stories tagged #trellix
AI Agent Workflows Could Expose Credentials Through Trusted Developer Tools
Trellix warns AI agent workflows can leak credentials from vaults into commands, logs, and model context.
6
Fake Google Security Team ad says 'no script reading' in voice phishing - then prints the script
Trellix mocks a Telegram ad recruiting voice-phishers impersonating Google while forbidding script reading.
1
One Stolen Active Directory File Can Expose Credentials for an Entire Windows Domain
Trellix warns that stealing a domain controller's NTDS.dit and SYSTEM hive can expose an entire Windows domain's credentials.
2
Hackers Steal Active Directory Password Hashes Without Attacking Domain Controllers Directly
Attackers use the DCSync technique to impersonate domain controllers and harvest AD password hashes and Kerberos keys without directly compromising domain controllers, Trellix warns.
3
Hackers Pose as Domain Controllers to Steal Active Directory Password Hashes
Attackers abuse Active Directory replication (DCSync) via the DRSUAPI protocol to steal password hashes and forge Golden Tickets for persistent domain compromise.
5
Top 10 Best Endpoint Encryption Software in 2026
A 2026 roundup of ten endpoint encryption products argues the engines are solved and buyers should choose management layers like Intune, Sophos, or Trellix.
5