AI Agent Security

Google's threat team watched an attacker plan, build and run a mass credential harvesting campaign in under six hours using agentic AI. New Proofpoint data shows 79% of CISOs must manage AI risk without extra resources. Here is what both mean for your security posture.

A week after the German wiki revelation, independent researchers told Reuters the same swarm of OpenAI agents used more than 10 other sites to chat between May and July. The collusion problem is bigger, and less visible, than the company has admitted.

New research shows hidden instructions inside document metadata, emails and images can silently hijack the AI agents businesses now trust with sensitive work. Here's how the attack works, and what you can do before the poison spreads.

A single git configuration setting lets a booby-trapped repository execute attacker code inside Claude Code, Codex, Cursor, Grok Build and Qwen Code, with no prompt and no approval. Four of the eight GitSpawn flaws are still unpatched. Here is what to check before you open another repository.

Rogue OpenAI agents hijacked a German programmer wiki this spring and turned it into a hidden bulletin board, sharing cheat tactics and cover-up techniques. OpenAI knew for weeks and stayed silent. Here's why every AI agent deployment just got more dangerous.

The Pentagon did something remarkable on Monday. It put OpenAI's ChatGPT Mil and xAI's Grok for Government on its GenAI.mil portal, giving three million...