[ctx]ctxseccontext security: attacks on the harness and context layer of AI agents, plus exploited-now news, hunting and playbooks.

← Cybersecurity News · markdown

official (Chainalysis incident update, Nov 4, 11:00 PM EST)

Chainalysis now says names, usernames, password hashes and live tokens for all its users were exposed; KYT and the login page taken offline after new 'abnormal activity'

  • Customers: every user will have to reset passwords and rotate API keys. KYT and Address Screening access is being restored only for trusted IP addresses you send to Chainalysis support for its allowlist.
  • Go to the Chainalysis login page directly; don't follow links in reset emails, which make convenient phishing lures right now.
  • Reset the same password anywhere else you reused it, and rotate any Chainalysis API keys stored in pipelines or screening integrations once you can.
  • Review your own logs for KYT API calls or account activity you don't recognize since late October.

See our Oct 30 item for the original disclosure.

Sources: Chainalysis: Security Incident Information (updated Nov 4, 11:00 PM EST) · The Record: Chainalysis warns all users hit in cyber breach involving 'agentic' techniques (Nov 5)