Security
Microsoft makes MXC available to limit the files an AI agent can use
A developer can select the Locked Down level to stop an agent from the use of the internet and files.
News category
Security
41 stories, newest first.
Security
Incognia started a fraud check for AI agents
Incognia writes that a legitimate agent does not show that the customer wants the task.
Security
A worm was found in Tensorlake SDK version 0.5.144
Researchers say a user must disable the token monitor of the worm before the user revokes tokens.
Security
Goodfire says its monitor for AI agents costs $51 for 1,500 sessions
In tests, the monitor found 94% of malicious hacking sessions but sent 8.7% of safe sessions for a check.
Security
A new Claude Code session sent data out with no confirmation
The confirmation is on one path, and the attack used a different path to the same result.
straiker.aiClaimed, not confirmed
Security
Cogent made a tool to find attack paths to the data of a company
Cogent tells that its study found 3 new attack paths for AI agents for each 1 for human attackers.
Security
An attacker got an ASOS employee login and then customer data
ASOS tells that the attacker did not get payment information.
Security
One chat message gave Zenity control of all AgentCore agents
AWS made changes for part of the problem, and Zenity tells companies to give each agent a role with only the access it must have.
the-decoder.comClaimed, not confirmed
Security
The first AWS patch for AgentCore agents did not remove the risk
AWS corrected the default permissions of the agents between June 22 and September 29, Zenity wrote.
www.csoonline.comClaimed, not confirmed
Security
Cycode found a vulnerability that let an MCP server steal OAuth credentials
Upgrade the SDK to version 2.2.0 or 1.30.0 to remove the vulnerability.
Security
Talos found 84 malware samples that put text in code for AI tools
The text works in only about 35% of tests at most, and it is always plaintext, which tools can find.
Security
President Lee thinks AI agents were used in attacks on 7 or more firms
The attacks made the data of 68,000 or more customers open to the attackers.
The SOFX ReportClaimed, not confirmed