Webinar Today: Agentic AI vs. Identity’s Last Mile Problem

This feed highlights multiple high-impact security developments: a supply-chain compromise of the Axios NPM package where a long-lived NPM access token was abused to bypass GitHub Actions OIDC publishing and push backdoored versions (attributed to North Korean actors); new weaponization and disclosed security issues affecting Google Cloud Vertex AI and related agentic-AI research; CrewAI prompt-injection flaws that can be chained to escape sandboxes and achieve arbitrary code execution; and the rise of continuous credential-harvesting malware (Venom Stealer) and industrialized credential theft