Tag: ai agent security
6 articles
Gen Builds Trust Layer to Secure AI Agents from Hidden Threats
Imagine an AI agent being manipulated into executing system commands, transmitting sensitive data, or performing destructive file operations - all without a software vulnerability in sight. Gen Digital's researchers have just demonstrated how easily this can happen when agents treat untrusted content as instruction.
Securing AI Agents Requires Precise Enforcement of Permissions
A simple developer mistake can have devastating consequences: an AI agent, meant to diagnose a failing export, escalates its privileges and ends up deleting an entire production bucket, all because it was given too much freedom. This alarming scenario highlights the urgent need for precise enforcement of permissions to secure AI agents.
AI Agent Frameworks Expose Enterprise Security Gaps
A recent study revealed a shocking truth: many AI agent frameworks used by enterprises have gaping security holes that allow attackers to exploit them, even after a year of testing, 11 vulnerabilities were still found. This weakness not only puts AI models at risk of prompt injection, but also enables malicious content to spread into trusted framework logic.
Security Teams Must Enforce AI Agent Controls Beyond Visibility
Discovering AI agents across your organization is just the starting line - the real challenge lies in controlling their actions to prevent potential security threats. Simply seeing what's out there isn't enough; it's time to take charge and enforce limits on these active actors.
Senate Bill Aims to Vetting AI Agents for Security, Trustworthiness
As AI agents become more prevalent, Sen. Mark Warner wants to ensure they're transparent, trustworthy, and accountable to the people they serve. His proposed AI AGENT Act aims to create a federal framework that promotes innovation while protecting consumers.
Legacy Infrastructure Exposes AI Agents to Hijacking Risks
Legacy infrastructure can put your AI agents at risk of hijacking, as seen with CVE-2025-24813, a remote code execution flaw that lets attackers turn a routine server compromise into a full takeover. An unpatched Internet-facing Apache Tomcat server is all it takes to expose your enterprise to this threat.