AI didn’t just make the headlines in February; it swallowed them whole. From viral agentic platforms to breached agents and AI-powered attacks, artificial intelligence dominated the global conversation. Furthermore, agentic AI “communities,” through the likes of Moltbook and Moltroad, have taken hold — kind of like Myspace and Facebook did in their glory days, but with much less HTML.
But while AI issues kept us occupied, attackers kept themselves busy exploiting vulnerabilities and weak credentials. So yes, we will talk a lot about AI, but it’s not the only threat on the block worth noting.
The Sysdig Threat Research Team (TRT) published a blog on February 11 that demonstrates how AI can dramatically compress an attack kill chain. In eight minutes, an attacker went from initial access to admin privileges. With access, the attacker was able to exfiltrate sensitive data and launch an LLMjacking attack. The blog includes several mitigation techniques for the TTPs used in the attack, and lists rules Sysdig Secure customers should use to safeguard against this type of threat.
The European Commission responds to an attack the right way: The Commission published a press release on February 5 regarding an attack on a portion of its infrastructure. A cyberattack that could’ve resulted in the exposure of staff names and cell numbers was thwarted. Rapid response contained the incident and cleared the system within nine hours. Additional EU-based organizations were also very likely impacted by the same campaign, such as the Dutch Data Protection Authority and Council for Judiciary, and an agency supporting Finland’s Ministry of Finance.
Stolen credentials lead to a massive breach in France: The French Ministry of Finance published a press release on February 18 regarding the loss of sensitive banking data from potentially 1.2 million accounts (1.5% of total records) from the national bank account registry (FICOBA). At the end of January, a threat actor used the credentials of a privileged employee to access a file with a list of all bank accounts opened in French banks. FICOBA was still offline as of February 27 and the investigation is ongoing.
Anthropic champions using AI for security: On February 20, Anthropic launched Claude Code Security in the hopes of promoting AI-powered vulnerability remediation. What it really did, though, was tank a bunch of tech stocks. But in all seriousness, in order to keep up with the speed of AI-enabled exploitation, this is the way forward in cyber defense. Sysdig Sage™ does this, too.
AI is accelerating attacks, compressing kill chains, and lowering the barrier to entry, but it isn’t replacing security fundamentals. The same weaknesses still lead to compromised organizations. Don’t let the spotlight blind you: Minimize exposure, work on credential management, improve identity hygiene, rotate tokens, and apply patches or other mitigations. All the security best practices we’ve known for years still apply, and our actions still decide the outcome — even in an AI-powered era.
By: Conor Sherman, Sysdig CISO in Residence
| Metric / Timeline | Description |
|---|---|
| 8 min | Initial access → admin privileges (Sysdig TRT) |
| >24 hrs | CVE disclosure → confirmed active exploitation (BeyondTrust) |
| 8–12% | ClawHub AI skills containing backdoors or credential stealers |
| 600+ | Fortinet devices compromised across 55 countries via an AI-assisted campaign |
Shadow AI is more potent than Shadow IT
Shadow IT moved data outside sanctioned environments. Shadow AI extends privileged access to them. Agent platforms on employee laptops hold API keys, tokens, and live connections to production systems — and historically, those privileged actions were bound by sanctioned SaaS apps and production environments your team could monitor and control. That boundary is gone. The attack surface now includes every laptop where a curious employee has installed an agentic AI tool.
As of this month, the risk is set in stone. A Vidar variant harvested tokens and API keys directly from an OpenClaw deployment. Sysdig TRT showed that, with those credentials in hand, an attacker can reach admin access in eight minutes. And eight to 12% of audited ClawHub skills contained backdoors or credential stealers. That's not a tail risk; it's a baseline contamination rate in a supply chain from which your teams are actively pulling.
If AI tooling isn't in your asset inventory, it's in your blind spot.
The exploitation window is now hours. Patch cycles are not enough
The BeyondTrust CVE (2026-1731) was under active exploitation within 24 hours of public PoC release, confirmed independently by GreyNoise, watchTowr, and Arctic Wolf. Ransomware use followed within three weeks. Threat actors are using AI to scan and weaponize disclosures faster than vulnerability management programs were designed to respond.
Patch when you can, as fast as you can. But the right question isn't "how fast do we patch?" It's "what's our posture when we haven't patched in time?" Real-time detection is the difference between catching exploitation in progress and reading about it in a disclosure.
The fundamentals haven't changed, but the stakes have:
| Security Fundamental | February 2026 Evidence |
|---|---|
| Identity Hygiene & Least Privilege | 600+ Fortinet devices compromised via weak credentials and exposed management ports; Sysdig TRT recorded a move from initial access to admin privileges in 8 minutes via AI-assisted automation. |
| AI Asset Inventory & Governance | Cline CLI supply chain compromise (Feb 17); 8–12% of AI agent skills on platforms like ClawHub found to contain backdoors or credential stealers. |
| Token & Key Rotation | Vidar infostealer (v2.0) purpose-built to harvest configuration files and API keys specifically from local AI tool environments (OpenClaw/Moltbot). |
| Active Defense over Reactive Patching | BeyondTrust (CVE-2026-1731) exploited within 24 hours of PoC release; confirmed active exploitation by GreyNoise, Unit 42, and watchTowr. |
此内容由惯性聚合(RSS阅读器)自动聚合整理，仅供阅读参考。 原文来自 — 版权归原作者所有。