5 posts tagged with “ai-agents”
The 12-factor-agents spec never says security out loud — yet owning your context window is DLP, a structured tool schema is your authorization point, and a human-contact tool call is your approval gate. Reliability and security are the same seams read twice.
Everyone is auditing the model. The real attack surface is the harness you wrap around it — the scaffolding that wires tools, memory, and control flow into an agent that can actually act.
Anthropic's Project Glasswing deployed Claude Mythos Preview to autonomously discover thousands of zero-days with a 72.4% exploit success rate. Less than 1% of findings have been patched. The bottleneck is no longer discovery — it's everything that comes after.
A penetration testing firm audited 15 applications built with AI coding assistants. They found 69 exploitable vulnerabilities, 6 critical. The estimated remediation cost: $1.5 million. Teams shipping AI-generated code need to focus on the security debt accumulating underneath.
Amazon mandated 80% adoption of its AI coding agent Kiro. Then Kiro deleted a production environment, caused a 13-hour AWS outage, and kicked off a chain of incidents that cost millions of orders. The failure wasn't the AI — it was deploying autonomy before safety infrastructure existed.