[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f_gGFXTcqIIhPl3tHU3ESvcDcEO443TXuxGuY-x-YUbk":3},{"article":4,"iocs":50,"watch_terms":51,"solutions":52,"lesson":141},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":32,"category":33,"article_tags":37},"548820bb-033f-4855-9049-b71569ddb666","Chainalysis discloses data breach from \"offensive agentic techniques\"","chainalysis-discloses-data-breach-from-offensive-agentic-techniques-41cdd4","Blockchain analytics firm Chainalysis disclosed a data breach after attackers used \"offensive agentic techniques\" to access internal systems and tools, exposing customer names, email addresses, user IDs, and organizational roles. [...]","Blockchain analytics firm Chainalysis has disclosed a data breach resulting from attackers using 'offensive agentic techniques' to access internal systems and tools. The breach exposed customer names, email addresses, user IDs, and organizational roles, though Chainalysis states no sensitive investigation data or authentication credentials were compromised. The company is investigating the incident with cybersecurity experts and utilizing AI to enhance its security review.","Chainalysis reports data breach due to 'offensive agentic techniques' exposing customer info.","https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Fchainalysis-discloses-data-breach-from-offensive-agentic-techniques\u002F","https:\u002F\u002Fwww.bleepstatic.com\u002Fcontent\u002Fhl-images\u002F2025\u002F03\u002F18\u002FBlockchain-2.jpg","2026-10-31T12:50:09+00:00","2026-10-31T13:00:14.094557+00:00",7,[17,20,22,24,27,29],{"name":18,"type":19},"Chainalysis","vendor",{"name":21,"type":19},"Microsoft",{"name":23,"type":19},"Anthropic",{"name":25,"type":26},"Claude Code","product",{"name":28,"type":26},"Trezor Safe 5",{"name":30,"type":31},"LLM","technology","2e06f76c-d5b9-4f54-9eef-4d3447b10730",{"id":32,"icon":34,"name":35,"slug":36},null,"Breaches","breaches",[38,40,45],{"category":39},{"id":32,"icon":34,"name":35,"slug":36},{"category":41},{"id":42,"icon":34,"name":43,"slug":44},"839da5c1-3c34-47e2-9499-f7201640e3ac","AI Security","ai-security",{"category":46},{"id":47,"icon":34,"name":48,"slug":49},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[21,18,23],{"controls":53,"vendors":140},[54,82,111],{"slug":55,"name":56,"problem":57,"products":58},"phishing-resistant-mfa","Phishing-resistant MFA","A stolen password, or a user who taps Approve on a push prompt, is no longer enough to log in.",[59,67,75],{"vendor_slug":60,"vendor_name":61,"vendor_logo":62,"product_slug":63,"product_name":64,"url":65,"description":66},"cisco","Cisco","\u002Fvendor-logos\u002Fcisco.png","duo","Cisco Duo","https:\u002F\u002Fduo.com\u002F","MFA and device trust, with support for passkeys and security keys.",{"vendor_slug":68,"vendor_name":69,"vendor_logo":70,"product_slug":71,"product_name":72,"url":73,"description":74},"yubico","Yubico","\u002Fvendor-logos\u002Fyubico.png","yubikey","YubiKey","https:\u002F\u002Fwww.yubico.com\u002Fproducts\u002F","Hardware security keys for FIDO2, passkeys and smart card login, in USB and NFC versions.",{"vendor_slug":76,"vendor_name":21,"vendor_logo":77,"product_slug":78,"product_name":79,"url":80,"description":81},"microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","entra-id","Microsoft Entra ID","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fidentity-access\u002Fmicrosoft-entra-id","Cloud identity and access management with single sign-on, conditional access, passkeys and identity governance.",{"slug":83,"name":84,"problem":85,"products":86},"identity-threat-detection","Identity threat detection and response (ITDR)","Attackers who log in with real, stolen credentials get noticed.",[87,95,103],{"vendor_slug":88,"vendor_name":89,"vendor_logo":90,"product_slug":91,"product_name":92,"url":93,"description":94},"vectra-ai","Vectra AI","\u002Fvendor-logos\u002Fvectra-ai.png","vectra-ai-platform","Vectra AI Platform","https:\u002F\u002Fwww.vectra.ai\u002Fplatform","Detection of attacker behaviour across network, identity and cloud.",{"vendor_slug":96,"vendor_name":97,"vendor_logo":98,"product_slug":99,"product_name":100,"url":101,"description":102},"acalvio","Acalvio","\u002Fvendor-logos\u002Facalvio.png","shadowplex-identity-protection","ShadowPlex Identity Protection","https:\u002F\u002Fwww.acalvio.com\u002Fproducts\u002Fidentity-protection\u002F","Decoy accounts and credentials that expose identity attacks and credential misuse early.",{"vendor_slug":104,"vendor_name":105,"vendor_logo":106,"product_slug":107,"product_name":108,"url":109,"description":110},"okta","Okta","\u002Fvendor-logos\u002Fokta.png","identity-threat-protection","Okta Identity Threat Protection","https:\u002F\u002Fwww.okta.com\u002Fproducts\u002Fidentity-threat-protection\u002F","Continuous risk assessment of sessions after login, with automatic actions such as ending sessions.",{"slug":112,"name":113,"problem":114,"products":115},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",[116,124,132],{"vendor_slug":117,"vendor_name":118,"vendor_logo":119,"product_slug":120,"product_name":121,"url":122,"description":123},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","cortex-xdr","Cortex XDR","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fcortex\u002Fcortex-xdr","Endpoint detection and response with extended detection across network, cloud and identity.",{"vendor_slug":125,"vendor_name":126,"vendor_logo":127,"product_slug":128,"product_name":129,"url":130,"description":131},"eset","ESET","\u002Fvendor-logos\u002Feset.png","eset-protect","ESET PROTECT","https:\u002F\u002Fwww.eset.com\u002Fint\u002Fbusiness\u002Fsolutions\u002Fendpoint-protection\u002F","Endpoint protection platform with detection and response add-ons.",{"vendor_slug":133,"vendor_name":134,"vendor_logo":135,"product_slug":136,"product_name":137,"url":138,"description":139},"sentinelone","SentinelOne","\u002Fvendor-logos\u002Fsentinelone.png","singularity-endpoint","Singularity Endpoint","https:\u002F\u002Fwww.sentinelone.com\u002Fplatform\u002Fendpoint-security\u002F","Endpoint protection and detection with automated response and rollback.",[],{"slug":142,"title":143,"body":144,"framework_refs":145,"framework_notes":153},"chainalysis-breached-via-ai-driven-agentic-attack-techniques","Chainalysis Breached via AI-Driven 'Agentic' Attack Techniques","Attackers used emerging 'offensive agentic techniques' — likely AI-driven, autonomous attack chains — to infiltrate Chainalysis's internal systems and tools, exposing customer names, email addresses, user IDs, and organizational roles. This incident highlights that traditional perimeter defenses may be insufficient against AI-augmented adversaries capable of rapidly chaining together reconnaissance, access, and exfiltration steps. The exposure of organizational roles and user IDs, even without credentials, can fuel targeted phishing or social engineering follow-on attacks. It matters because blockchain analytics firms hold sensitive investigative context that makes them high-value targets for sophisticated threat actors, including those seeking to evade law enforcement.",[146,147,148,149,150,151,152],"NIST CSF 2.0 PR.AA: Identity Management, Authentication, and Access Control","CIS Control 17: Incident Response Management","NIST SP 800-53 SI-2: Flaw Remediation","GDPR Article 32","ISO\u002FIEC 27001:2022 A.8.8: Management of technical vulnerabilities","MITRE ATT&CK T1566: Phishing","NIS2 Article 21(2)(b)",{"GDPR Article 32":154,"NIS2 Article 21(2)(b)":155,"MITRE ATT&CK T1566: Phishing":156,"NIST SP 800-53 SI-2: Flaw Remediation":157,"CIS Control 17: Incident Response Management":158,"ISO\u002FIEC 27001:2022 A.8.8: Management of technical vulnerabilities":159,"NIST CSF 2.0 PR.AA: Identity Management, Authentication, and Access Control":160},"The breach exposed personal data including names, email addresses, and organizational roles, triggering obligations under Article 32 to implement appropriate technical measures to protect personal data against unauthorized processing.","As an entity whose services underpin critical financial crime investigations, Chainalysis falls under heightened obligations for incident handling and access control measures that NIS2 Article 21(2)(b) specifically requires for essential and important entities.","The exposed customer names, emails, and organizational roles create a rich dataset for highly targeted spear-phishing campaigns against Chainalysis customers, making downstream phishing a direct follow-on risk from this breach.","Agentic attackers often exploit misconfigurations or unpatched interfaces in internal tooling; systematic flaw remediation processes would reduce the exploitable attack surface available to automated adversaries.","Chainalysis engaged external cybersecurity experts post-breach; a pre-defined incident response plan with AI-threat-specific playbooks would have accelerated detection and containment of the novel agentic attack.","Offensive agentic techniques exploit weaknesses in exposed internal tools; proactive vulnerability management of those tools as required by this control would have reduced the attacker's ability to pivot through internal systems.","The attacker accessed internal systems and tools, suggesting insufficient controls around authenticated access; this framework item mandates rigorous identity verification and access restriction that would have limited lateral movement."]