New Open Standard Puts AI Agents Under Runtime Control
The Agent Control Standard defines open middleware hooks that let teams block, allow, or modify AI agent actions before they reach production systems.
Articles Tagged "Security"
BadHost: The Auth Bypass Lurking in 325M AI Systems
CVE-2026-48710 in Starlette lets a single malformed HTTP header bypass authentication on vLLM, LiteLLM, FastAPI, and every MCP server in production.
IBM and Red Hat Bet $5B on AI to Secure Open Source
IBM and Red Hat's Project Lightwell deploys 20,000 engineers and AI to patch open source vulnerabilities against exact deployed versions - no forced upgrades, commercial subscription model.
TeamPCP Breaches GitHub via Poisoned VS Code Extension
TeamPCP stole 3,800 GitHub internal repos via a malicious Nx Console update live for just 11 minutes, tracing back to the TanStack supply chain compromise.
Microsoft Agent 365 Review: AI Agent Control Plane
Microsoft's enterprise control plane for AI agents ships with strong M365 integration and real security muscle - but critical features are still in preview, and the licensing model is a puzzle.
Best AI-Integrated Offensive Security Tools in 2026
Ten offensive security tools ranked by AI integration depth - from Burp Suite and Legba to Nuclei, Ghidra, Hashcat, BloodHound CE, and Metasploit.
Google Catches First AI-Built Zero-Day in Wild
Google's Threat Intelligence Group confirmed criminals used an AI model to discover and weaponize a zero-day 2FA bypass - the first documented case of AI-generated exploitation in a real attack campaign.
OpenAI Daybreak Turns Codex Into Enterprise Security
OpenAI's Daybreak initiative packages GPT-5.5 and Codex Security into a managed cybersecurity program with 20+ partners - a direct answer to Anthropic's Project Glasswing.
Pwn2Own 2026 Capacity Overflow, Hackers Drop 0-Days Solo
Pwn2Own Berlin 2026 hit a hard submission cap for the first time in 19 years. Rejected researchers are now publishing working zero-days directly, breaking the contest's secrecy norms.
AI Agents Can Hack and Self-Replicate Across Networks
Palisade Research shows frontier AI models autonomously exploit vulnerabilities and deploy working AI inference servers on remote machines, with success rates jumping from 5% to 81% in twelve months.
AI Coding Agents Breached - Attackers Took the Keys
Six research teams disclosed exploits against Codex, Claude Code, Copilot, and Vertex AI. Every attack went after credentials the agents carried - not the models themselves.
Cisco Buys Astrix for $400M to Lock Down AI Agent Keys
Cisco closes its $400M acquisition of Astrix Security, folding a non-human identity platform into Cisco Identity Intelligence to govern the API keys and OAuth tokens powering enterprise AI agents.
