Analysis
One foothold, many permissions: the transitive authority problem for AI agents
A benign goal does not grant every intermediate permission needed to complete it. Connected tools make that distinction operational rather than philosophical.
AI security research / articles
Analysis
Analysis across cases.
43 Articles · Page 8 of 9
5 matching records on this page
Published articles
From the archive
Further reading
Analysis
The attack surface after the prompt: when agent state becomes authority
Long-running agents inherit state. The security question is who wrote that state, why the next agent trusts it, and whether shared memory can silently become an instruction channel.
Analysis
From finding to exploit: the new automated exploit loop
KASS shows the defensive research version of executable exploit synthesis. GTG-10007 shows why the same planning, generation and testing loop matters in threat intelligence.
Analysis
The sandbox was isolated. The shared service was not.
Several 2026 failures sit outside the model container itself: shared package infrastructure, task ownership, browser origins, local control planes and connected apps.
Analysis
What AI-driven operations actually stole, exposed and changed in 2026
Credentials, cloud tokens, identity records, payment data and production access recur across the 2026 cases. The useful question is not whether AI was involved, but what actually crossed the boundary.
No matches on this page.