agent-security
Sandboxing an AI agent: least privilege for a program that improvises Lesson
Sandboxing an AI agent means deciding in advance what actions it can take, rather than trusting it to decide well in the moment, because an agent's behaviour is shaped by text that attackers can often influence and no amount of model quality closes that gap.
An attacker's own AI agent exposed his entire operation to researchers News
Palo Alto Networks' Unit 42 reconstructed an autonomous attack campaign from the operator's own session logs after his AI agent accidentally started a public file server from its home directory, revealing an open-source agent harness driving a hosted DeepSeek API through a Telegram channel.
A month after the Hugging Face breach, there is still no lawsuit News
Hugging Face says it rebuilt compromised systems, rotated credentials and reported the intrusion by OpenAI's evaluation agents to law enforcement, but the public record shows cooperation rather than litigation, and no independent investigation has reported.