Arrakis Security Report Finds 76% of AI Agents Are Dormant but Keep Their Credentials and Connections
2026-10-21T20:51:36Z•32f5bc3574d77f0b29e5148966ad18544443933d08a7bfbba087557e19a65a76
AI-securityBRONZE-SANDCASTLEFrame.ioINC-ransomwareMicrosoft-365PHPSandboxieThe-Gentlemenbackdoorcloud-securitycredential-phishingcritical-infrastructurecyber-incidentdata-exposureransomwareremote-code-executionsupply-chainvulnerabilities
What happened
HackRead RSS entries report multiple cybersecurity developments, including critical PHP2Shell vulnerabilities enabling unauthenticated remote code execution, ransomware-affiliate exposure of AI chats and stolen data, China-linked BRONZE SANDCASTLE abuse of Sandboxie to load backdoors, a BAE Systems-related cyber incident, and phishing through Frame.io notifications targeting Microsoft 365 credentials. The feed also contains security analysis and non-security promotional content.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- hackread
- Record identifier
- 32f5bc3574d77f0b29e5148966ad18544443933d08a7bfbba087557e19a65a76
- Enrichment time
- 2026-10-21T20:51:36Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.