company
Company named as the subject of the second breach the author cites as the same attack pattern; no incident particulars are given in the source.
The MIT-licensed framework gives agents one command grammar for Salesforce, ServiceNow, DocuSign and Agentforce. The safety metadata a host checks before running a command comes from provider authors the project leaves unnamed.
Reality
A Help Net Security column reads the two intrusions as one sequence run twice, with the token first and the inbox second. It says the same four steps describe what an authorized AI agent does in Google Workspace every day.
Reality
The spread traces to two numbers you can read off your own logs: the tokens a harness spends before any work starts, and how many turns it takes. Together they predicted total token use with an R-squared of 0.99.
Reality
Composio ran the leaderboard-topping model through 240 agent runs against live Gmail, GitHub and Slack tools, and 129 passed. Harness choice moved the outcome more than price did.
Reality
A Material Security executive argues the Vercel and Composio breaches were one attack run twice, entered through a token rather than an inbox. The same pattern describes sanctioned AI agents.
Reality