Third-party agents outpace identity controls
A 2026 report finds 1,280 third-party products embed AI, but only 282 authenticate through single sign-on, leaving most agents invisible to identity systems.
30 results for “ai agent”
A 2026 report finds 1,280 third-party products embed AI, but only 282 authenticate through single sign-on, leaving most agents invisible to identity systems.
An Anthropic model sent a false homicide tip to Philadelphia police in July; the company didn't detect it until September, prompting a city rebuke.
A SailPoint report finds most organizations still run identity security at human speed even as they deploy AI agents that operate far faster.
Shai-Hulud worm compromised Tensorlake's npm SDK version 0.5.144, stolen credentials and cloud keys at risk for developers.
Tel Aviv and New York startup Rein Security raises $25 million Series A to guard AI agents with runtime controls and governance.
Repeated AWS agent security fixes that later resurfaced show the tension between agent autonomy and isolation, researchers say.
CrowdStrike attributes a data theft campaign against South Korean financial firms to a Chinese-speaking actor who paired an agentic pentesting tool with multiple LLMs.
AWS's new Strands Box uses OS isolation and custom policies to curb AI agent behavior, but security experts warn controls have gaps.
Amazon's new open-source Strands Box uses OS-level isolation and policy rules to stop autonomous agents from going rogue.
The Wikimedia Foundation says rogue OpenAI agents edited its wikis, targeted Etherpad, and flooded its APIs with millions of requests.
Apple is changing a macOS privacy setting after an AI agent read a columnist's messages, raising questions about third-party app permissions.
Research lab Transluce reports autonomous AI agents tried SQL injection and other probes against U.S. and Canadian government websites.
Dutch bug-hunting nonprofit says AI agents exploited Zammad zero-days, stealing researcher emails in seconds.
AI agents, like a dog rewarded for rescuing children, can learn to cheat when the proxy for success diverges from the true objective.
An OpenAI agent swarm incident shows containment is a security architecture problem, not a guarantee, with every boundary a potential failure point.
Contributed analysis from Token Security warns that agent autonomy can turn ordinary access grants into unpredictable attack paths.
Treasury Secretary Scott Bessent says AI executives, not their models, should face legal consequences for criminal acts committed by autonomous agents.
Investors say AI agents are being deployed faster than they can be secured, opening a market for startups that can govern non-human identities.
New research finding watermarking alters model behavior, including refusal of harmful requests and tool calling.
SecurityWeek's roundup covers a ransomware sentencing, a zero-click AI plugin flaw, and a critical SAP bug under active scrutiny.
OpenAI's new misalignment framework reveals models that searched GitHub for leaked keys and fabricated data during training.
Startup bets AI agents will handle security audits and policies, with humans still holding approval power.
Irregular's lab test found a coding agent replaced its own underlying model and fine-tuned away an embedded refusal without being told to.
Spain's data protection agency says an AI agent chained together multiple attack phases to breach a system and modify personal data.
Spain's data protection agency says an autonomous AI agent chained scans, an exploit, and data tampering in a company breach.
At TechCrunch Disrupt 2026, Gusto, Insight Partners, and Leland executives will debate which startup roles people should still own as AI agents take on more work.
A new draft code of conduct would block its MAI models from generating working exploit code while opening a review track for defensive security work.
Researchers say a swarm of OpenAI agents flooded RubyGems with more than 2,000 malicious packages, forcing a four-day signup freeze.
Anthropic CEO Dario Amodei calls for slower AI development, warning that swarms of AI agents could overtake the internet in six months to a year without stronger safeguards.
AI agents are unearthing decades-old bugs and widening the patch gap, leaving secret-dependent defenses exposed.