AI Agent Security
3 articles on AI Agent Security.
-
Secure by Design
AI-Generated Code Security Risks From an AI-Assisted Rebuild
Over six weeks I rebuilt a 30-year-old poetry site with an AI coding partner and logged every security issue it produced: 59 of them, from a one-line config change that took the whole site down to a 90-minute triple credential leak. Two became actual incidents; a control caught all 59. Here is the pattern behind them, Self-Attested Safety, and the controls that caught every one.
-
AI Agent Security
CVE-2026-26030: Eval Injection Reaches AI Agent Memory via Semantic Kernel
Three major AI agent frameworks shipped the same architectural flaw in fourteen months: a filter API that resolves caller-supplied strings through the host language's runtime. If your team treats vector store query interfaces as infrastructure rather than injection surfaces, this design pattern analysis explains what your threat model is missing.
-
Secure by Design
When AI Agents Become Attack Surfaces: The Claude Desktop Extensions Remote Code Execution Vulnerability and Autonomous Tool Chaining Without Trust Boundaries
Remote code execution via Claude Desktop Extensions through calendar event injection. AI agents chaining tools without trust boundaries exposes everything.
