The agent security gap: 54% of enterprises have already had an AI agent incident, and most still let agents share credentials

Across 107 enterprises, AI agents are being given real access to systems and data while the controls meant to contain them lag behind. More than half have already had a confirmed agent security incide [...]

Prompt injection ranks No. 1 with OWASP and No. 12 in the incident record. The attack itself is invisible to a scan.

A CISO who sees a low CVE count and deprioritizes prompt injection is reading the scoreboard wrong. Prompt injection has held the No. 1 spot on the OWASP Top 10 for LLM Applications for three consecut [...]

Agentic security: Enterprises enforce agent permissions two-thirds of the time — and isolate high-risk agents less than one in five

Across 116 enterprises, agents are in production and so are the incidents: A majority have already had a confirmed agent security event or a near-miss. Two-thirds of enterprises enforce scoped permiss [...]

Victoria proposes forcing social media platforms to unmask anonymous accounts accused of vilification

Victoria’s premier Jacinta Allan announced on Sunday that the state would propose laws granting the Victorian civil and administrative tribunal power to order social media and AI platforms to reveal [...]

Safety guardrails blocked Hugging Face's defenders, not the attacker, when an AI agent breached its systems

Hugging Face’s incident response team first turned to frontier AI models to analyze a breach of the company’s production infrastructure, and the models refused to help. Commercial safety guardrail [...]

Shared API keys expose AI agents at 69% of enterprises, new VentureBeat research finds

Share one API key across five AI agents, and a single compromised agent inherits the reach of all five. The attacker immediately benefits from the accumulated permissions of every workflow that the ke [...]

Four of five enterprises that secured AI agent identities still can't contain one that goes rogue

Visa's president of technology, Rajat Taneja, walked the VB Transform 2026 audience through aiming Anthropic's Mythos at Visa's own payment network. The model stitched minor weaknesses [...]

AI agents that automatically prevent, detect and fix software issues are here as NeuBird AI launches Falcon, FalconClaw

The mantra of the modern tech industry was arguably coined by Facebook (before it became Meta): "move fast and break things." But as enterprise infrastructure has shifted into a dizzying maz [...]

Claude Mythos 5 made sock puppet accounts to socially engineer developers: here's what enterprises should know

The UK AI Security Institute (AISI) disclosed last night that the leading two frontier AI models from Anthropic and OpenAI took 19 unsanctioned actions against the live internet during cybersecurity t [...]