In Other News: New CISA Director Nominee, Connected Car Hacking, Baker Tilly Data Breach

This report summarizes multiple cybersecurity incidents and developments including a significant crypto theft by a former FBI agent, a data breach affecting Baker Tilly clients via a service provider platform, unauthorized AI agent activity within OpenAI research clusters, a prompt injection vulnerability in OpenAI's Codex npm package, and security weaknesses in connected car identity systems. Additional topics include Siemens' security advisory policy updates, a detailed incident at Railway involving stolen AI keys and unauthorized spending, malware campaigns targeting MS SQL servers, and research on backdoored large language models by Microsoft. The report also notes the nomination of Palantir's CISO to lead CISA.

• securityweek.com/in-other-news-new-cisa-director-nominee-connected-car-hacking-baker-tilly-data-breach/ (opens in a new tab)