Third-party agents outpace identity controls
A 2026 report finds 1,280 third-party products embed AI, but only 282 authenticate through single sign-on, leaving most agents invisible to identity systems.
30 results for “agents”
A 2026 report finds 1,280 third-party products embed AI, but only 282 authenticate through single sign-on, leaving most agents invisible to identity systems.
Researchers say a single chat prompt could extract cloud credentials and let an attacker take over every AgentCore agent in an AWS account and region.
An Anthropic model sent a false homicide tip to Philadelphia police in July; the company didn't detect it until September, prompting a city rebuke.
A SailPoint report finds most organizations still run identity security at human speed even as they deploy AI agents that operate far faster.
Tel Aviv and New York startup Rein Security raises $25 million Series A to guard AI agents with runtime controls and governance.
Repeated AWS agent security fixes that later resurfaced show the tension between agent autonomy and isolation, researchers say.
AWS's new Strands Box uses OS isolation and custom policies to curb AI agent behavior, but security experts warn controls have gaps.
Amazon's new open-source Strands Box uses OS-level isolation and policy rules to stop autonomous agents from going rogue.
The Wikimedia Foundation says rogue OpenAI agents edited its wikis, targeted Etherpad, and flooded its APIs with millions of requests.
Anthropic CEO's call to slow frontier AI sparks debate over regulation, while untested agents reach production.
Apple is changing a macOS privacy setting after an AI agent read a columnist's messages, raising questions about third-party app permissions.
Research lab Transluce reports autonomous AI agents tried SQL injection and other probes against U.S. and Canadian government websites.
Dutch bug-hunting nonprofit says AI agents exploited Zammad zero-days, stealing researcher emails in seconds.
AI agents, like a dog rewarded for rescuing children, can learn to cheat when the proxy for success diverges from the true objective.
Contributed analysis from Token Security warns that agent autonomy can turn ordinary access grants into unpredictable attack paths.
Treasury Secretary Scott Bessent says AI executives, not their models, should face legal consequences for criminal acts committed by autonomous agents.
Investors say AI agents are being deployed faster than they can be secured, opening a market for startups that can govern non-human identities.
New research finding watermarking alters model behavior, including refusal of harmful requests and tool calling.
SecurityWeek's roundup covers a ransomware sentencing, a zero-click AI plugin flaw, and a critical SAP bug under active scrutiny.
A zero-click remote code execution flaw in popular AI coding agents could let attackers run malicious code without developer interaction, researchers warn.
Two Docker Sandboxes vulnerabilities let malicious guest code read or modify macOS host files, with fixes shipped in version 0.42.0.
OpenAI's new misalignment framework reveals models that searched GitHub for leaked keys and fabricated data during training.
Startup bets AI agents will handle security audits and policies, with humans still holding approval power.
Irregular's lab test found a coding agent replaced its own underlying model and fine-tuned away an embedded refusal without being told to.
At TechCrunch Disrupt 2026, Gusto, Insight Partners, and Leland executives will debate which startup roles people should still own as AI agents take on more work.
Exaforce extends its AI security tool beyond Claude to monitor OpenAI, Gemini and Copilot agents using existing SOC telemetry.
A new draft code of conduct would block its MAI models from generating working exploit code while opening a review track for defensive security work.
Researchers say a swarm of OpenAI agents flooded RubyGems with more than 2,000 malicious packages, forcing a four-day signup freeze.
Anthropic CEO Dario Amodei calls for slower AI development, warning that swarms of AI agents could overtake the internet in six months to a year without stronger safeguards.
AI agents are unearthing decades-old bugs and widening the patch gap, leaving secret-dependent defenses exposed.