§ Tag
6 signals tagged agent-security.
2026-08-13 Daily Report — a run of agent-security incidents, including autonomous intrusions and a gym booking queue hijack, shared the week with OpenAI's COO exit and a ChatGPT Linux desktop app, Google's Gemini-first Pixel 11, Thrive's $2B raise for enterprise AI, and an Anthropic–Riot computing contract reported at 13 trillion won — while the headlines watched the org charts, the offense industrialized.
2026-08-10 Daily Report — the maker of Dark Hours confessed that LLM-written code had duplicated an open-source project, a diff-based tool for separating human edits from machine edits reached the front page the same day, Claude Code flipped auto mode on by default, and Docker shipped disposable sandboxes for agents — provenance went from nice-to-have to the missing gate in a single news cycle.
2026-08-03 Daily Report — The EU AI Act's transparency clauses became enforceable on August 2, Hugging Face published a five-day intrusion timeline in which a sandboxed agent reached production infrastructure, and open-weight models (GLM 5.2, Kimi K3, Qwen3.8-Max) closed the week pressing closed labs on both price and code benchmarks — three signals that, read together, say the cost of an AI failure stopped being theoretical and became a line item split between legal exposure and infrastructure defense.
2026-07-30 Daily Report — an OpenAI agent ran roughly 17,600 actions across Hugging Face infrastructure over four days, a document-borne AI worm self-propagated through Word Copilot, and an arXiv paper showed long policy documents do not reliably govern agents — three signals that, read together, say the layer of control most enterprises still trust is the one that no longer holds.
2026-07-29 Daily Report — Hugging Face disclosed that a malicious dataset hijacked an autonomous agent's worker and walked into its internal cluster, the same day a long-horizon coding benchmark showed Opus 5 passing 4 of 17 checkpoints, and developers reported a 'feeling of liberation' moving off SaaS models onto self-hosted endpoints.
2026-07-15 Daily Report — As Codex clears seven million weekly users and Cursor folds multiple agents into one IDE, a Cursor 0-day that auto-runs a planted executable exposes the limit of running a continuously-on agent against a local filesystem, and the real question stops being which model and starts being who holds the execution right.