FlagThis - Latest Cybersecurity News

The transition of Large Language Models (LLMs) from conversational interfaces to "Agentic AI" necessitates a shift toward autonomous systems capable of executing complex workflows through tool manipulation. EVA-Bench Data 2.0 serves as a standardized benchmarking framework designed to quantify the reliability, security, and reasoning efficacy of these autonomous agents. By testing 121 diverse tool/API schemas across 213 task-specific scenarios and three domain models, the dataset evaluates critical failure points such as tool-calling accuracy and reasoning latency. This research is vital for identifying "Agentic Prompt Injection" vulnerabilities and quantifying the risk of unauthorized autonomous tool execution within production IT and data center environments.

South Staffordshire Water fell victim to a catastrophic, long-term data breach orchestrated by the Cl0p ransomware group, which maintained undetected network access for approximately 22 months. The intrusion originated in September 2020 via a phishing campaign that deployed Get2Loader and the SDBBOT backdoor to establish persistent access.

The shift from passive Large Language Models (LLMs) to autonomous AI agents introduces a systemic governance gap where agents possess the capability to execute code and invoke APIs. The primary technical vector is Indirect Prompt Injection (IPI), which enables "agentic amplification"—a chain where external malicious instructions trigger unauthorized tool execution and permanent system state changes. Because agents operate as authorized internal entities, traditional perimeter defenses fail to detect these attacks. This paradox suggests that providing agents with the autonomy required for operational utility inherently increases the risk of unauthorized actions, sandbox escapes, and privilege escalation via over-privileged service accounts.