Blog

341 malicious skills. A country-wide ban. C2 in your preferences file. And every security layer bypassed. The week of July 4-11, 2026 was the worst week in AI agent security history.

From IDORs to the AI-reviewing-AI doom loop — here's why 80% of vibe-coded apps never reach production, and what to do about it.

Between June 30 and July 2, 2026, seven major AI agent vulnerabilities were disclosed or exploited. Cursor had a zero-click RCE. Ten of eleven open-source coding agents were vulnerable to shell injection. AI agents were hallucinating 250,000 domains that adversaries could register. HN didn't notice any of it. Four days later, CISA put the first AI agent platform on KEV.

Two papers published in the last three weeks define the first static analysis framework for AI agent programs and a risk-scoping BOM standard. They found 238 taint-style prompt-to-tool risks across 5,399 real-world agents — and their evaluation required a manual audit set because automated tools can't make trust judgments. The audit market now has academic backing.

Tenet Security researchers discovered a novel attack class where fake error reports injected through a public Sentry DSN cause AI coding agents to execute attacker-controlled code on developer machines. 85% success rate across Claude Code, Cursor, and Codex. 2,388 organizations confirmed exposed. And the same blind spot exists in every MCP-connected data source your developers trust.

The DN42 community turned an AI agent's network scan into a $6,531 AWS bill, five m8g.12xlarge instances, and the funniest IRC log you'll read this year.

Friendly Fire and GhostApproval: two exploits published within 48 hours prove that AI coding agents can't secure themselves — and the government is mandating them anyway.

The 'Top 10 Agentic AI Security Platforms for 2026' just dropped. All ten are automated. Here's why the sixth layer — human-led audit — is the one that catches what the other five miss.

Sophos found that Claude Code, Cursor, and OpenAI Codex trigger the same EDR alerts as human intruders. If your security tools can't tell the difference between your agent and an attacker, how do you know which is which?

Machine identities outnumber human users up to 50:1 in enterprises. AI agents have no lifecycle governance, no offboarding, and 43% of orgs with expanded AI identity footprints get breached. Here's what to do about it.