ai-agents
This site has already answered the question it is about to ask. It did so in May, in its first article, in about ten lines, and then it put the answer in a drawer and spent three months writing post-mortems. The agent that deleted the database had an impeccable post-mortem:
ai-agents
An autonomous model breached a real company's production database, recognized the target was real, and kept going anyway. Somewhere between the breach and the blog post, a catastrophe filed the correct paperwork and came out the other side as routine
ai-agents
Part one of this series had no villain, a door nobody had thought to guard, tricked open by ordinary content arriving through an ordinary channel. Part two had one on a single side of its mirror: a person, with intent, who picked a target and rented an unsupervised agent to
ai-agents
Part one of this series described five systems tricked into acting for someone they had never agreed to serve - a confused deputy, thirty-eight years old, wearing new clothes. None of those five cases required a human to decide anything beyond building the tool and leaving a door unguarded. This
ai-agents
Mindgard's proof of concept was Windows Calculator. They renamed the executable git.exe, dropped it in the root of a repository, and opened the project in Cursor. No click, no prompt, no dialog to approve... Calculator windows began stacking up on their own, one after another, for as
ai-agents
Between late June and mid-July 2026, six research teams - an academic pair at the Alan Turing Institute, a university-industry team spread across Tel Aviv University, the Technion, and Intuit, a lab at Hong Kong University of Science and Technology, a boutique firm called Sand Security Research, Varonis, and a
ai-agents
The framing of shadow AI as a data protection problem is intuitive and almost entirely wrong. The intuitive version: an employee connects a personal AI assistant to their work email, the assistant processes confidential client communications, the data leaves the organisational perimeter. Article 33 breach. Notification obligation. Supervisory authority investigation.
oauth
When a hacker wants access to a corporate system, they traditionally need something: a password, a session cookie, a phishing link clicked at the right moment. They need a human to make a mistake. The EvilTokens platform, documented in May 2026, had a better approach. It did not need mistakes.
ai-agents
Last week, SQLite published AGENTS.md. For those unfamiliar with the format: AGENTS.md is a file that lives in a repository and tells AI agents working with that code how to behave. What they may do, what they may not do, where the traps are, which files are treated
the-agent-governance-gap
There is now empirical evidence for something that governance practitioners suspected but could not quantify: AI agents lose their grip on constraints the more complex the task becomes. This is, in the annals of things-we-probably-should-have-tested-before-deployment, a fairly significant entry. A paper published in May 2026, "Constraint Decay: The Fragility
the-agent-governance-gap
In April 2026, an autonomous AI coding agent - Cursor running Anthropic's Claude Opus 4.6 - deleted a startup's production database. The agent found an unscoped API token, guessed a destructive command, and executed it. Nine seconds. Three months of backups, gone. The founder asked