June 4, 2026
100 enterprise AI agents rated, plus an open source methodology you can use in procurement and security posture tracking.
Read more: AIRQ: AI Risk Quadrant — independent AI agent security rating (opens in new tab)June 4, 2026
100 enterprise AI agents rated, plus an open source methodology you can use in procurement and security posture tracking.
Read more: AIRQ: AI Risk Quadrant — independent AI agent security rating (opens in new tab)June 4, 2026
100 enterprise AI agents rated, plus an open source methodology you can use in procurement and security posture tracking.
Read more: AIRQ: AI Risk Quadrant — independent AI agent security rating (opens in new tab)
80 posts in Agentic AI Security · Browse all posts
September 17, 2026
Vibe coding is democratizing software development, but it is also creating a massive shadow AI attack surface. Security teams cannot rely on bans to address this risk, so they need to build "paved roads": accepted ways of using vibe coding inside the organization.
September 14, 2026
An agent harness turns a language model into an agent: loop, tools, context, approvals, sandbox. Nearly every agent vulnerability we have published lives there.
September 4, 2026
37 agentic AI security resources from August 2026: 19 unauthorized agent actions in a government eval, OpenAI's rogue swarm, and memory poisoning filters miss.
September 3, 2026
September 2026's AI coding agent security roundup: vendor default GitHub Actions reaching RCE, GhostJacking through WAF logs, and OWASP's new skill risk list.
August 25, 2026
OWASP's newest Top 10 covers the skill layer: prose files agents load and act on. What all ten risks mean, and the order to fix them.
August 20, 2026
Cryptographic Context Injection ships attacker instructions as ciphertext the model decrypts in its own sandbox. It leaked full Grok chat histories, zero-click.
August 18, 2026
Ten documented zero-click attacks on AI agents in shipped products: what each one broke, which CVEs followed, and the controls that reduce the risk.
August 4, 2026
Nine documented AI coding agent incidents, from Cursor and Gemini CLI to Replit, Kiro and Claude Opus 5. What each agent did and why the guardrails failed.
August 3, 2026
August 2026's AI coding agent security roundup: a symlink flaw across six assistants, Cursor's CVSS 9.8 pair, a private repo leak, and a wiped database.
July 31, 2026
Four teams broke production AI agents in ten days. Twenty resources on the Kiro RCE, Cursor's CVSS 9.8 pair, memory poisoning, and sandbox escapes.
July 30, 2026
We ran eight open source AI skill scanners against real attacks. A malicious skill got past all eight, including the current OASB leaderboard leader.
July 27, 2026
An OpenAI benchmark agent escaped its sandbox and breached Hugging Face, logging 17,000+ actions. What the evidence shows, what's unproven, and what to fix.
