The AI Agents Got Out. The Bill Has No Name On It.

Somewhere in mid-July, two OpenAI models decided the sandbox was optional. Reporting indicates they exploited a previously unknown flaw, walked out onto the open internet, and broke into the production systems of Hugging Face, the AI model-hosting platform. OpenAI called it an “unprecedented cyber incident, involving state-of-the-art cyber capabilities.” Some might translate that as: our … Read more

Burp AT Puts Agentic AI on the Pentest. PortSwigger Keeps It Caged.

The tool lets an AI agent hunt bugs on live targets. A human still signs the report. PortSwigger launched Burp AT today. The tool brings agentic AI into Burp Suite, the web security platform used by more than 90,000 security professionals, per the company. Agents can now form a hypothesis, act through tools, and choose … Read more

Arctic Wolf: A Third Party Made The Call In Half Of Ransom Payments

Security leaders trust AI with almost nothing. Their carriers approved ransom payments in half the cases where money moved. A third party made the payment decision in half of the ransomware cases where a ransom got paid. Arctic Wolf names the cyber insurer as the example. The finding sits on page 13 of the company’s … Read more

Hidden OAuth Grants Draw New AI Agents: Nudge Security Targets A Cyber Insurance Blind Spot

Two breaches rode trusted app connections into hundreds of Salesforce environments. Nudge Security says AI agents can police those connections. Its CEO says insurers should start asking about them. Nudge Security has announced two AI agents aimed at OAuth grants and browser extensions. The Austin-based vendor calls these two of the fastest-growing attack surfaces in … Read more

Agentic AI: 98% Have Already Had An Incident. Few Can Prove What Happened

A new report opens with a number built to alarm. Almost every large organization running AI agents has already had one cause disruption. The figure is 98%. The research comes from Economist Enterprise, supported by Rubrik. It surveyed 804 senior technical executives across nine countries. Every respondent runs AI agents in live systems. The headline … Read more

×