Cybersecurity threats shift toward industrialized supply-chain attacks

Cybersecurity threats are evolving toward industrialized supply-chain attacks and sophisticated AI-driven maneuvers. Managed service providers (MSPs) and software ecosystems are increasingly targeted, with reported incidents rising by 168% year-over-year. Attackers are utilizing SaaS platforms, open-source repositories, and MSP ecosystems as repeatable production lines to distribute malware through hijacked GitHub Actions, malicious npm packages, and trojanized SaaS plugins.

In response to these shifting tactics, Proofpoint Inc. has introduced Agentic Collaboration Security. This new strategy focuses on intent-based detection to identify malicious activity hidden within legitimate business workflows, such as email and collaboration tools. The system aims to address the risks posed by AI agents that interact directly with data, bypassing traditional application boundaries. The solution utilizes AI reasoning to provide deeper investigation and automated decision governance to combat alert fatigue and sophisticated phishing campaigns.