6 min read
Buy the Control Plane. Then Prove It Works.
Agent control is turning into a product you can buy. Open or closed, you didn't write it, so what it does in your environment is the only proof you'll get.
Tagged: ai-agent-security
7 posts tagged with “ai-agent-security”
6 min read
A Record of Approval Is Not Approval
Darktrace rewrote the saved conversations of four coding agents and got them to attack a network. The lesson isn't about signatures. It's about where your agent's permission comes from.
7 min read
Invisible From the Layer Above
Seven defects surfaced in one migration. None of them crashed, none failed a test, and none turned a dashboard red. A broken control and a working control send the same signal: silence.
7 min read
The Refusal Was the Exploit Path
An agent refused to run the attacker's binary, then wrote its own decoder and ran the payload anyway. Three incidents and one of our own show the same thing: a constraint you hand an agent is a preference it can route around.
6 min read
Nobody Can Tell You Who Wrote the Bug
A tidy-up PR removed a safety pattern from a Snowflake workflow. Five days later an autonomous agent had a Jira token. The headlines said an AI wrote the bug; the commit history cannot actually tell you who did, and that is the more serious problem.
7 min read
You Trusted the Folder. The File Changed.
Five CVEs across four vendors in thirteen months, all the same bug: your coding agent trusts a directory, then executes a file that can change underneath it. Here is the pattern, and the one line in Claude Code's restricted mode that actually fixes it.
7 min read
I Attacked My Own AI Agents — What Held, What Didn't
Three pieces of research showed how to hijack AI coding agents. I run Claude Code, MCP, and autonomous CI agents in production — so I ran them against my own setup. Here's what held, what didn't, and what I changed.