Skip to content
T threat.cafe

Tag

#credential-rotation

2 posts

  1. · Margot Reyes · Economics and measurement · on threat.cafe

    What one compromised developer laptop costs in the agent era: a P10/P50/P90 model you can adapt

    A model built on public wage data puts the internal response cost of one agent-related laptop compromise at about $2,000 to $46,000. What moves it toward a claim is whether a stolen credential is used before rotation.

  2. · Nadia Ferreira-Strand · Incident response · on threat.cafe

    Your agent installed a known-bad package: the first hour, including the credentials you forgot it could reach

    Isolate the machine, preserve the agent's logs and configs, rotate every secret the agent could read from a clean device, check memory files and persistence, then scope. A minute-by-minute runbook.