Recently active topics

We believe organizations should be able to embrace AI productivity without becoming a victim to the unintended damage of AI actions.   BeyondTrust AI Agent Security makes that possible. Building on BeyondTrust’s market-leading Endpoint Privilege Management and 20 years of privilege-centric identity security, our approach to AI security focuses not only on what is malicious, but also on what is permitted. Purpose-built for agentic AI on the endpoint, AI Agent Security distinguishes AI agent activity from human activity and governs what agents are allowed to do before they act, without restricting their human users, helping organizations safely embrace AI at scale.  How our early access customers are already using AI Agent Security:AI Agent Discovery & Attribution: Identifying all the AI agents running across their endpoints, including shadow AI, sub-agents, Skills, and MCP servers; and attributing every action to its source, human or agent. Vendor-Agnostic Governance: Applying consi

AgentCore gateways, tokens, and identities join the attack path AI agents don't ask for permission the way people do. They hold tokens, call gateways, and borrow the privilege of whatever identity spun them up. Insights now brings the identity layer of Amazon Bedrock AgentCore into the graph and connects it to the IAM principals, Okta apps, and Entra ID applications on either side. What you get with this update Your AgentCore estate, connected: Gateways, gateway targets, workload identities, and OAuth2 credential providers are now graph entities, wired the way AWS runs them Gateway to target Target to the Lambda or agent runtime it fronts Gateways and runtimes to the workload identities they act as Each runtime version is its own non-human identity, so a version with a new execution role doesn't quietly overwrite what you reviewed last quarter. Continue Reading HERE What are connectors?Connectors connect third-party software to Identity Security Insights to give you a co

How Malicious Codex Skills Can Hijack your AI AgentThe relationship between developers and coding agents like Codex and Claude has become increasingly symbiotic. Agentic attacks are rising and will become a routine part of the threat landscape going forward. Coding agent skills are a pivotal feature of coding agents that provide consistency in agent behavior. Any organization invested in coding agents is likely already using skills in its workflows.  We at Phantom Labs® will be showcasing the limits and capabilities of malicious Codex skills in the Codex command-line interface—what they can do, the damage they can cause to users or organizations, and potential defenses against these attacks.  What Are Codex Skills?A Codex skill is a markdown file of saved instructions that an agent reads to help it remember and perform tasks consistently. They’re like any other text file, but they’re written in markdown because agents are trained to parse that syntax specifically. AI agents have two wa

How Malicious Codex Skills Can Hijack your AI AgentThe relationship between developers and coding agents like Codex and Claude has becomeincreasingly symbiotic. Agentic attacks are rising and will become a routine part of the threat landscape going forward.  Coding agent skills are a pivotal feature of coding agents that provide consistency in agent behavior. Any organization invested in coding agents is likely already using skills in its workflows.   We at Phantom Labs® will be showcasing the limits and capabilities of malicious Codex skills in the Codex command-line interface—what they can do, the damage they can cause to users or organizations, and potential defenses against these attacks.  What Are Codex Skills?A Codex skill is a markdown file of saved instructions that an agent reads to help it remember and perform tasks consistently. They’re like any other text file, but they’re written in markdown because agents are trained to parse that syntax specifically.  AI agents have two

How Malicious Codex Skills Can Hijack your AI AgentThe relationship between developers and coding agents like Codex and Claude has becomeincreasingly symbiotic. Agentic attacks are rising and will become a routine part of the threat landscape going forward. Coding agent skills are a pivotal feature of coding agents that provide consistency in agent behavior. Any organization invested in coding agents is likely already using skills in its workflows.  We at Phantom Labs® will be showcasing the limits and capabilities of malicious Codex skills in the Codex command-line interface—what they can do, the damage they can cause to users or organizations, and potential defenses against these attacks. What Are Codex Skills?A Codex skill is a markdown file of saved instructions that an agent reads to help it remember and perform tasks consistently. They’re like any other text file, but they’re written in markdown because agents are trained to parse that syntax specifically. AI agents have two ways

Remote Support Labs: Exploring What’s Possible Remote Support Labs is the new BeyondTrust community space dedicated to extending and evolving secure Remote Support. The idea is to bring together practical examples, shared experiments, and emerging patterns that help organizations work more efficiently, automate safely, and improve support outcomes. Rather than providing finished solutions, Labs highlights areas where customers are actively building, testing, and refining ideas, creating a foundation for shared learning and innovation. A Community Focused on Practical Extensions Remote Support Labs will rely on artifacts that extend BeyondTrust Remote Support in real environments, including: Reusable scripts and special actions Endpoint automation concepts API-driven workflows Lightweight tools and integrations The emphasis is on how teams approach problems, not on prescribing a single implementation path. Contributions are meant to inform, inspire, and encourage exploration, not

Password Cracking 101: Attacks & Defenses Explained What is Password Cracking? Password cracking (also called password hacking) is an attack vector that involves hackers attempting to crack or determine a password for unauthorized authentication. Password hacking uses a variety of programmatic techniques, manual steps, and automation using specialized tools to compromise a password. These password cracking tools are referred to as ‘password crackers’. Increasingly, these tools are leveraging AI to improve password cracking speed and efficiency. Passwords can also be stolen via other tactics, such as by memory-scraping malware, shoulder surfing, third party breaches, and tools like Redline password stealer. A password can refer to any string of characters or secret used to authenticate an authorized user to a resource. Passwords are typically paired with a username or other mechanism to provide proof of identity. This combination is referred to as credentials. Compromised passwords

How to Strengthen Your Microsoft Defenses in 2026: Security Recommendations Relying entirely on patching or simple fixes is an inadequate defense strategy. Remediation must be paired with proactive architectural guardrails. Implement a multilayered defense-in-depth model built on these key report recommendations: Tailor vulnerability management to your environment and move away from a one-size-fits-all approach. Prioritize security updates based on your unique environment, ensure your operating system and third-party software are up-to-date, and avoid using end-of-life software. Implement least privilege and zero trust controls across the stack. Restricting privilege across network, identity, account, cloud, and application layers provides a safety net that limits lateral movement and the blast radius of zero day exploits. Secure remote access pathways by replacing common entry points such as RDP and VPNs. Enforce authentication and session monitoring to detect misuse early. Impl

AD Bridge 26.2 – RC4 removed from authentication and domain join protocolsAD Bridge no longer uses RC4 in authentication and domain join protocols, in preparation for Microsoft’s deprecation of RC4 in Active Directory.The change spans Kerberos configuration and encryption-type handling, along with protocol-level updates to SAMR, Netlogon, Schannel, WKSSVC, machine password changes and NTLM message protocol.  Together, these reduce reliance on legacy cryptography and improve your security posture. Customer Case StudyKarma Automotive Strengthens Support and Saves $600,000 in Labor Costs with BeyondTrust Latest Available VersionsAD Bridge 26.2 - August 2026BeeKeepers CommunityCan the AD Bridge console be upgrade over an existing console?Yes, AD Bridge supports in-place upgrades.  Run the latest installer on the computer where AD Bridge is already installed.  For more information refer to the guide on installing the AD Bridge Management Console.For more questions, refer to the AD Bridge FA