What changes when software acts on its own. AI agent identity, prompt injection, model risk and the controls security teams need before agents reach production.
151 posts, newest first. Page 2 of 5.
Tags in this track:AI SecurityAI Agent SecurityAgentic AIMachine IdentityPrompt InjectionLLMAIMCP
Mandiant ranked voice phishing the second most common initial infection vector of 2025. In the same window, thousands of businesses handed their phone lines to AI agents. Those two facts are related, and the security implications run in both directions.
MCP is Anthropic’s open standard for connecting AI agents to your tools and data. Here is what it actually is, how it differs from a REST API, and a clear rule for when to use each in 2026.
Your AI security review passed and still missed the real attack surface. EchoLeak, over-permissioned agents, shadow AI: the AI-specific vectors most CISOs never test for, and the five moves that close them.
OpenRouter was worth $1.3 billion in May. Stripe has reportedly agreed to pay more than $7 billion for it in August. The routing layer turned out to be the valuable part.
The Salesloft Drift breach hit 700+ companies with stolen OAuth tokens and never touched a password. Machine identities now outnumber humans 109 to 1, and AI-powered attackers are harvesting them at machine speed. Here is why human-shaped IAM cannot protect AI agents, and what to fix in 90 days.
Huang published the letter with 25 signatures. A day later there were 50, including OpenAI and Google. That reversal says more than the document does.
Amodei says Anthropic never wanted a ban. His real objection is irreversibility. Days earlier, a Chinese lab shipped 2.8 trillion open parameters.
Hugging Face detected the intrusion on July 16. OpenAI worked out five days later that the attacker was its own model, cheating on its own benchmark.
Agents can already prove who they are. What no standard has cleanly solved is passing scoped authority down a multi-hop chain across organizations. Here is the real state of agent identity in 2026, minus the blockchain hype.
Machine identities now outnumber humans by 45 to 1 or more, and every AI agent widens the gap. Here is what an identity orchestration layer is, in plain terms, and how to build one that governs humans, workloads, and agents from a single control plane.
On Space Exploration Day, the moon landing is a founder's lesson in sequencing: commit to the outcome before you have proof it is reachable, and build the proof on the way.
It is AI Appreciation Day. From an operator's seat, here is what AI actually changed: it collapsed the distance between an idea and a shipped product, and rewrote how customers discover companies.
On World Youth Skills Day, the advice that runs against the usual: stop future-proofing a single skill. The durable skill is learning a new one fast, under pressure.
MCP concentrates every AI-agent-to-tool interaction through one interface, and that makes it a new attack surface. A breakdown of the vulnerabilities and how to secure them.
America turns 250, and it is still the best place to build something the market has no words for yet. A founder's reflection on a career spent doing exactly that.
The leading non-human identity (NHI) management tools for 2026, compared by job: discovery and posture, secrets management, machine identity, and workload identity.
AI doesn't move outsourced work back to the US, it shrinks how much human work the task needed at all. What that means for jobs and economies through 2035.
Large language models get the headlines, but small language models are quietly winning most real enterprise workloads on cost, speed, and privacy. Here is what SLMs actually are, how they work, and a clear framework for choosing between an SLM and an LLM.
Most tech predictions are click-bait with no accountability. I made 47 in early 2024 and tracked them. Here is the scoreboard with receipts.
A poisoned LiteLLM package led to 4TB stolen from Mercor, the AI training startup serving Meta, OpenAI, and Anthropic. Class action lawsuits filed.
An honest practitioner's view of AI-assisted software development in 2026: what Cursor, Claude Code, Copilot, and Devin actually do well, and where they still break.
Google I/O 2026 shipped an entire agent stack: Gemini 3.5 Flash, Antigravity 2.0, WebMCP, Gemini Spark, and Agent Payments Protocol. What it means for builders.
AI generates code faster than humans can review it. So why are computer science enrollments hitting record highs?
The opinionated guide to running Claude Code well. CLAUDE.md, skills, subagents, hooks, and the workflows that produce quality code for engineers, QA, and
80% of Fortune 500 companies now run active AI agents. Only 10% have a clear strategy to manage them.
Technical guide to securing multi-agent AI systems with zero trust principles, delegation chain validation, and behavioral boundaries.
Apple chose Google's Gemini over ChatGPT for Siri's AI upgrade. This $1B/year deal reveals who's actually winning the AI race, and it's not who you think.
OpenAI just announced ads are coming to ChatGPT. For 800M weekly users, this changes everything about how 'free' AI actually works.
Clawdbot is the viral AI assistant everyone's installing, but giving AI agents full system access raises critical security questions.
Struggling with MCP authentication? The November 2025 spec just changed everything. CIMD replaces DCR's complexity with a simple URL-based approach, no
