June 4, 2026
Open-source methodology by OWASP, CoSAI, CSA, and NIST contributors enables enterprises to compare AI agents by security risk for the first time
Read moreJune 4, 2026
Open-source methodology by OWASP, CoSAI, CSA, and NIST contributors enables enterprises to compare AI agents by security risk for the first time
Read moreJune 4, 2026
Open-source methodology by OWASP, CoSAI, CSA, and NIST contributors enables enterprises to compare AI agents by security risk for the first time
Read more
68 posts in Agentic AI Security · Browse all posts
July 17, 2026
Learn how our AI red teaming agent cleared the most of GitHub's ProdBot challenge in 57 seconds using context seeding, and what defenders can take from this…
July 15, 2026
A crafted cursor:// link installs an attacker-controlled MCP server that executes unsandboxed commands under your account. The install dialog is supposed to…
July 9, 2026
This month exposed a harsh reality: autonomous coding agents are expanding the enterprise attack surface faster than we can patch them. Explore our digest…
July 2, 2026
July 2026's agentic AI security roundup: agentic zero trust whitepapers, AutoJack & other new exploits, and the newest agent defenses.
June 30, 2026
AI coding assistants run shell commands with your full account authority, but their security filters are fundamentally flawed. Meet GuardFall: a…
June 25, 2026
OWASP ranks Identity & Privilege Abuse #3 because it sets the blast radius for every other AI agent risk. Read our full technical guide to ASI03: the five…
June 3, 2026
The AIRQ report scores 100 AI agents on attack surface, blast radius, and defenses. The AIRQ framework lets you assess your own stack. Read about the…
June 1, 2026
June 2026's agentic AI security roundup: coding agent RCEs, Microsoft Semantic Kernel flaws, a Copilot backdoor, and the newest agent defenses.
May 26, 2026
A SynJack attack tricks AI coding assistants into RCE through a symlink-disguised file copy. We tested six major tools. All were vulnerable. How it works…
May 18, 2026
OWASP ASI02 - full technical guide. How AI agents misuse legitimate tools to wipe drives and delete databases. Plus mitigations and controls that stop it.
May 13, 2026
Major insurers are adding AI-related exclusions to their policies. Cyber insurance tells us what comes next, and what enterprises should prepare before…
May 7, 2026
A regression in the Claude Code trust dialog and a settings-scope inconsistency let a cloned repo run unsandboxed code with one keypress, and on CI runners…
