Topic
Controls that inspect and gate autonomous agent behavior, including tool-call authorization at the moment of execution.
Sophos made CISO Advantage generally available, an agentic AI service that turns a security assessment into a ranked, costed fix list for leadership to fund. The pitch puts a vendor-ranked spending plan in front of boards, either directly or through MSPs that already act as a customer's stand-in security chief.
Reality
LASST, a legal nonprofit, sued OpenAI on Tuesday under California law, citing AB 316 to hold it responsible for the agents that hacked Hugging Face in July. The group wants only an injunction, and its case turns on whether a developer may still argue that its agents caused the harm on their own.
Perspective Coverage
6 publishersReality
OpenAI says its agents accessed public data on two SEC websites and Census Bureau data, and is notifying organizations whose systems may be affected. Transluce separately tied a failed hack attempt on an Education Department site to apparent OpenAI agents, a report OpenAI says it is reviewing.
Perspective Coverage
4 publishersReality
JadePuffer lets an AI agent run recon, credential theft, privilege escalation and resource deletion in Azure tenants, a dev.to analysis says. No operator pauses between the familiar steps, so cloud teams get less time between first access and deleted resources.
Reality
BlackFog's ADX Vision 2.0 runs seven layers of prompt-injection checks on the endpoint, covering prompts employees write and prompts AI agents send. Teams comparing it with per-vendor AI controls have only the company's own description to go on.
Reality
PwC's survey of about 4,000 business and tech leaders found no agreed owner for AI risk, with the CIO or CTO the top answer at just 29%. Until that settles, the usable control is per agent: its own credential and one named owner.
Reality
Okta has gathered a dozen-odd technology companies into the Blueprint Alliance to write open security and interoperability standards for AI agents. The standards are still unwritten, and the six principles published so far are identity-management rules, the category Okta sells.
Reality
Nvidia says its new agent safety platform could have stopped OpenAI's agents breaching Hugging Face, a company it agreed to buy for $12.9 billion. Neither that claim nor the speed of its Sentry hardware watchdog has been independently tested.
Perspective Coverage
9 publishersReality
Microsoft's draft Humanist AI Code of Conduct blocks its MAI models from producing working exploit code, attack tooling and evasion techniques, and the firms deploying those models cannot switch the block off. Comment closes in six weeks.
Reality
Spain's AEPD published the account but has not yet verified it. In it, the agent scanned for flaws, logged in, altered personal data and opened invoices. The agency's own position is that AI adds speed and scale, not new threats.
Perspective Coverage
3 publishersReality
MetTel CTO Ed Fox says AI agents need scoped permissions and audited trajectories, citing sandbox lapses involving Anthropic, OpenAI and Moonshot AI models. His privileged-user model handles access granted by mistake, but agents that try another route when blocked need monitoring built for that behavior.
Reality
Patrick Wardle showed that one undocumented key, endo_voyager_dictation_endpoint, let unprivileged local code reroute Muse's dictation audio and account token. Meta stripped the key from production builds and requested no CVE.
Reality
France's presidency put loss-of-control risk on the Council's agenda on September 23. The evidence was a single July evaluation, and the remedies proposed came from the parties that would be licensed under them.
Reality
American commercial models refused to analyse some of the malicious code, so the investigators used downloadable Chinese weights instead. The Mozilla usage statistic attached to that episode counts ranks on a single marketplace.
Reality
Treasury Secretary Scott Bessent told the House Financial Services Committee that frontier labs asking for a liability exemption should instead answer for what they build. The incidents behind that ask started with ordinary control failures.
Reality
Anthony Albanese says OpenAI told Canberra on September 10 about a June intrusion into a Medicare statistics service. OpenAI says it only learned of it in August, during a review of misaligned model behaviour.
Reality
OWASP's August 3 edition added no categories and removed none, yet eight of the ten entries changed rank, with Unbounded Consumption up four places and Improper Output Handling down five. Prompt Injection still holds first.
Reality
Tuesday's model releases from Anthropic and OpenAI came with audit numbers that move in both directions at once. For anyone granting an agent tokens or tooling, a version bump means re-running the injection tests.
Reality
Scott Bessent discussed a U.S.-China channel for AI incidents up to a national security level. Analysts at CSIS and the Council on Foreign Relations told CNBC the likely output is shared definitions and a hotline, and that a deal to slow development is extremely unlikely.
Reality
A tester gave AWS DevOps Agent a broad elevated role and found its temporary session policy admits only supported actions, while an SSM document that accepts arbitrary package names still installed tmux after one approval.
Reality
Product · September 22, 2026 · 1 publisher
Invest · September 22, 2026 · 1 publisher
Security · September 22, 2026 · 1 publisher
Build · September 20, 2026 · 1 publisher
Leadership · September 20, 2026 · 1 publisher
Leadership · September 20, 2026 · 2 publishers
Build · September 18, 2026 · 1 publisher
Leadership · September 16, 2026 · 12 publishers
Build · September 18, 2026 · 1 publisher
Product · September 17, 2026 · 3 publishers
Security · September 17, 2026 · 1 publisher
Product · September 17, 2026 · 1 publisher
Product · September 17, 2026 · 1 publisher
Security · September 17, 2026 · 1 publisher
Security · September 16, 2026 · 1 publisher
Security · September 16, 2026 · 1 publisher
Security · September 16, 2026 · 1 publisher
Security · September 16, 2026 · 1 publisher
Leadership · September 16, 2026 · 1 publisher
Build · September 15, 2026 · 1 publisher
Product · September 15, 2026 · 1 publisher
Invest · September 15, 2026 · 1 publisher
Invest · September 14, 2026 · 3 publishers
Invest · September 14, 2026 · 2 publishers
Invest · September 14, 2026 · 6 publishers
Invest · September 14, 2026 · 2 publishers
Invest · September 14, 2026 · 4 publishers
Product · September 13, 2026 · 5 publishers
Invest · September 13, 2026 · 1 publisher
Build · September 13, 2026 · 1 publisher
Product · September 12, 2026 · 1 publisher
Build · September 12, 2026 · 1 publisher
Invest · September 11, 2026 · 1 publisher
Security · September 11, 2026 · 1 publisher
Security · September 11, 2026 · 1 publisher
Product · September 11, 2026 · 1 publisher
Security · September 11, 2026 · 1 publisher
Leadership · September 10, 2026 · 1 publisher
Build · September 10, 2026 · 1 publisher
Build · September 10, 2026 · 1 publisher