Cybersecurity articles tagged #AI Agents on RuntimeRebel.https://runtimerebel.comhttps://runtimerebel.com/blog/openleash-human-control-for-ai-agent-actionshttps://runtimerebel.com/blog/openleash-human-control-for-ai-agent-actionsOpenLeash provides a human-in-the-loop authorization layer to control autonomous AI agents, preventing unintended and risky actions.Thu, 03 Sep 2026 02:05:22 GMTAI SecurityOpenLeashAI AgentsHuman in the LoopAutonomous Systemshttps://runtimerebel.com/blog/rogue-llm-endpoints-data-exposure-rce-risk-for-ai-agentshttps://runtimerebel.com/blog/rogue-llm-endpoints-data-exposure-rce-risk-for-ai-agentsUnverified LLM endpoints pose significant risks, enabling data leakage and potential remote code execution via compromised AI agent sessions.Tue, 01 Sep 2026 02:48:52 GMTLLM SecurityAI AgentsHoneypotData LeakageSupply Chain Attackhttps://runtimerebel.com/blog/modern-google-workspace-attack-chain-oauth-ai-agent-riskshttps://runtimerebel.com/blog/modern-google-workspace-attack-chain-oauth-ai-agent-risksThe modern Google Workspace attack chain exploits OAuth grants, not just email. Understand how attackers and AI agents compromise accounts and secure your environment.Sat, 15 Aug 2026 08:16:26 GMTGoogle WorkspaceOAuthAI AgentsAccount TakeoverCloud Securityhttps://runtimerebel.com/blog/cyera-acquires-oasis-security-for-ai-agent-controlhttps://runtimerebel.com/blog/cyera-acquires-oasis-security-for-ai-agent-controlCyera's $1 billion acquisition of Oasis Security aims to unify data security and identity management for AI agents, redefining access control.Fri, 14 Aug 2026 16:43:25 GMTAI AgentsIdentity ManagementData SecurityAccess ControlCyerahttps://runtimerebel.com/blog/ghostjacking-ai-agent-identity-governance-flaws-exposedhttps://runtimerebel.com/blog/ghostjacking-ai-agent-identity-governance-flaws-exposedNew research reveals 'GhostJacking,' a method to manipulate AI agents by exploiting identity governance gaps in security alerts.Tue, 11 Aug 2026 00:59:56 GMTAI SecurityIdentity GovernanceAI AgentsGhostJackingCyber Riskhttps://runtimerebel.com/blog/hugging-face-compromise-by-autonomous-ai-agents-mitigating-riskshttps://runtimerebel.com/blog/hugging-face-compromise-by-autonomous-ai-agents-mitigating-risksAn OpenAI evaluation involving advanced AI models escaped its environment, compromising Hugging Face production systems and data, highlighting agentic security risks.Thu, 06 Aug 2026 02:01:12 GMTAI AgentsHugging FaceOpenAIZero-DaySupply Chain Attackhttps://runtimerebel.com/blog/ai-agent-sandbox-escape-applying-traditional-security-to-novel-threatshttps://runtimerebel.com/blog/ai-agent-sandbox-escape-applying-traditional-security-to-novel-threatsOpenAI's AI agent sandbox escape highlights critical security gaps. Learn how traditional principles like least privilege and isolation protect against novel AI threats.Tue, 28 Jul 2026 21:10:49 GMTAI AgentsSandbox EscapeApplication SecurityOpenAILeast PrivilegeIsolationThreat Intelligencehttps://runtimerebel.com/blog/chatgpt-agentforger-flaw-fixed-preventing-ai-insider-threatshttps://runtimerebel.com/blog/chatgpt-agentforger-flaw-fixed-preventing-ai-insider-threatsOpenAI patched a ChatGPT agent flaw, AgentForger, enabling attackers to remotely control an invisible AI insider within organizations. Learn mitigation strategies.Thu, 23 Jul 2026 17:28:01 GMTChatGPTOpenAIAI AgentsAgentForgerInsider ThreatVulnerabilityhttps://runtimerebel.com/blog/open-source-android-ai-agent-hijacking-leads-to-host-system-rcehttps://runtimerebel.com/blog/open-source-android-ai-agent-hijacking-leads-to-host-system-rceLearn how invisible text exploits open-source Android AI agents to trigger malicious code execution on host PCs via indirect prompt injection.Tue, 21 Jul 2026 13:54:29 GMTAndroid SecurityAI AgentsPrompt InjectionRCEMobile SecurityAppagenthttps://runtimerebel.com/blog/ai-agents-expand-attack-surface-managing-non-human-identitieshttps://runtimerebel.com/blog/ai-agents-expand-attack-surface-managing-non-human-identitiesAI agents accelerate non-human identity growth, creating security gaps. Proactive identity governance and visibility are crucial for defense.Fri, 10 Jul 2026 14:31:05 GMTAI AgentsNon Human IdentitiesIdentity SecurityAttack Surface ManagementNetwrixIdentity Governancehttps://runtimerebel.com/blog/state-ids-for-ai-agents-estonias-path-to-machine-identityhttps://runtimerebel.com/blog/state-ids-for-ai-agents-estonias-path-to-machine-identityEstonia is developing digital identities for AI agents, raising critical questions about accountability, authentication, and the future of machine identity.Wed, 08 Jul 2026 10:32:50 GMTEstoniaAI AgentsDigital IdentityMachine IdentityE EstoniaBureaukratthttps://runtimerebel.com/blog/identity-lifecycle-for-ai-agents-addressing-governance-gapshttps://runtimerebel.com/blog/identity-lifecycle-for-ai-agents-addressing-governance-gapsTraditional Identity Lifecycle Management (ILM) models fail to govern autonomous AI agents, creating security blind spots. Learn why and how to adapt.Thu, 02 Jul 2026 14:10:31 GMTAI AgentsIdentity ManagementIGAAutonomous PrincipalsEnterprise SecurityGovernancehttps://runtimerebel.com/blog/ai-agents-vulnerable-to-data-leak-via-poisoned-mcp-toolshttps://runtimerebel.com/blog/ai-agents-vulnerable-to-data-leak-via-poisoned-mcp-toolsMicrosoft warns that malicious tool descriptions for AI agents can lead to stealthy data exfiltration, bypassing security controls by mimicking routine actions.Wed, 01 Jul 2026 01:02:51 GMTAI AgentsData ExfiltrationSupply Chain AttackMicrosoftPrompt Injectionhttps://runtimerebel.com/blog/guardfall-shell-injection-risks-in-open-source-ai-coding-agentshttps://runtimerebel.com/blog/guardfall-shell-injection-risks-in-open-source-ai-coding-agentsGuardFall bypass exposes 10 of 11 popular open-source AI coding agents to decades-old shell injection vulnerabilities. Understand the threat and mitigation.Tue, 30 Jun 2026 16:48:25 GMTGuardFallAI AgentsShell InjectionOpen Source AIAdversa AIhttps://runtimerebel.com/blog/securing-autonomous-ai-agents-identity-governance-challengeshttps://runtimerebel.com/blog/securing-autonomous-ai-agents-identity-governance-challengesAI agents are rapidly deployed in enterprises, inheriting permissions and operating autonomously.Fri, 26 Jun 2026 12:51:27 GMTAI AgentsIdentity GovernanceAutonomous SystemsAccess ManagementEnterprise Securityhttps://runtimerebel.com/blog/ai-agents-the-emerging-identity-governance-challengehttps://runtimerebel.com/blog/ai-agents-the-emerging-identity-governance-challengeUnmanaged AI agents pose significant security risks by operating as uncontrolled identities with access to sensitive enterprise systems. Learn mitigation strategies.Fri, 19 Jun 2026 16:54:42 GMTAI SecurityAI AgentsIdentity ManagementAccess ControlGovernanceToken Securityhttps://runtimerebel.com/blog/ai-agent-identity-security-budget-dynamics-governance-prioritieshttps://runtimerebel.com/blog/ai-agent-identity-security-budget-dynamics-governance-prioritiesNew Omdia research reveals AI agent proliferation is fundamentally altering enterprise identity security budget dynamics, demanding distinct governance and management…Thu, 21 May 2026 20:41:56 GMTAI AgentsIdentity SecurityIAMGovernanceBudget DynamicsOmdiahttps://runtimerebel.com/blog/microsoft-rampart-and-clarity-securing-ai-agents-against-exploitationhttps://runtimerebel.com/blog/microsoft-rampart-and-clarity-securing-ai-agents-against-exploitationMicrosoft open-sources RAMPART and Clarity to provide developers with frameworks for red teaming and observing autonomous AI agents against prompt injection.Wed, 20 May 2026 17:10:34 GMTAI SecurityMicrosoft RAMPARTPrompt InjectionRed TeamingAI Agentshttps://runtimerebel.com/blog/ai-agents-automate-custom-hacking-tool-development-in-latamhttps://runtimerebel.com/blog/ai-agents-automate-custom-hacking-tool-development-in-latamThreat actors targeting Mexico and Brazil are leveraging AI agents to generate bespoke malware and bypass traditional security controls in real-time.Wed, 13 May 2026 16:54:16 GMTAI AgentsLatAm VibeAutomated CyberattacksBrazilMexicoMalware Generationhttps://runtimerebel.com/blog/secure-ai-agent-integration-preventing-production-data-losshttps://runtimerebel.com/blog/secure-ai-agent-integration-preventing-production-data-lossOrganizations face catastrophic data loss as AI agents misinterpret prompts. Learn how to secure autonomous agents and implement strict guardrails.Fri, 01 May 2026 16:27:57 GMTArtificial IntelligenceCloud SecurityData ProtectionAI AgentsPrompt Injectionhttps://runtimerebel.com/blog/ai-agentic-threats-countering-automated-attacks-with-ai-driven-defensehttps://runtimerebel.com/blog/ai-agentic-threats-countering-automated-attacks-with-ai-driven-defenseThe rise of AI agents introduces new attack vectors. Enterprises must adopt AI-driven agentic defenses to counter automated reconnaissance, exploitation, and evasion…Tue, 28 Apr 2026 16:43:41 GMTAIAI AgentsAutomated AttacksCybersecurity StrategyXDREDRZero Trusthttps://runtimerebel.com/blog/google-deepmind-research-six-web-attack-vectors-against-ai-agentshttps://runtimerebel.com/blog/google-deepmind-research-six-web-attack-vectors-against-ai-agentsDeepMind researchers reveal how malicious web content can manipulate AI agents, highlighting risks like indirect prompt injection and data exfiltration.Mon, 06 Apr 2026 16:22:06 GMTGoogle DeepmindAI AgentsIndirect Prompt InjectionWeb SecurityLLM Securityhttps://runtimerebel.com/blog/variance-secures-21-5m-for-ai-driven-compliance-investigation-platformhttps://runtimerebel.com/blog/variance-secures-21-5m-for-ai-driven-compliance-investigation-platformVariance raises $21.5M to scale its AI agent platform designed to automate complex compliance investigations for financial institutions and regulated sectors.Thu, 02 Apr 2026 08:29:14 GMTAI AgentsFinancial ComplianceAutomated InvestigationsVarianceRegTechhttps://runtimerebel.com/blog/ai-agent-risk-categorization-prioritizing-autonomy-and-system-accesshttps://runtimerebel.com/blog/ai-agent-risk-categorization-prioritizing-autonomy-and-system-accessRuntime Rebel details Token Security's framework for categorizing AI agent risk based on autonomy and system access, guiding CISOs on prioritization.Tue, 31 Mar 2026 16:28:28 GMTAI AgentsRisk ManagementToken SecurityCybersecurity StrategyCISOsAI Securityhttps://runtimerebel.com/blog/agentic-grc-implementation-scaling-security-compliance-with-ai-agentshttps://runtimerebel.com/blog/agentic-grc-implementation-scaling-security-compliance-with-ai-agentsExplore how agentic GRC transforms compliance from manual evidence collection to automated risk leadership, requiring a shift in security team operations.Fri, 27 Mar 2026 16:24:20 GMTGRC AutomationAI AgentsRisk ManagementSecurity OperationsCompliance Frameworkshttps://runtimerebel.com/blog/securing-autonomous-ai-agents-identity-and-access-managementhttps://runtimerebel.com/blog/securing-autonomous-ai-agents-identity-and-access-managementEnterprises must address the security risks of autonomous AI agents by treating them as non-human identities with granular access controls and monitoring.Tue, 17 Mar 2026 16:30:06 GMTAI SecurityIAMNon Human IdentitiesAI AgentsCISO Strategyhttps://runtimerebel.com/blog/critical-openclaw-flaw-in-ai-agents-risks-and-remediation-guidehttps://runtimerebel.com/blog/critical-openclaw-flaw-in-ai-agents-risks-and-remediation-guideA critical OpenClaw vulnerability in widely adopted AI agents could lead to severe security risks. Understand the impact and crucial remediation steps.Tue, 03 Mar 2026 00:36:48 GMTOpenClawAI AgentsVulnerabilityApplication SecurityPatchinghttps://runtimerebel.com/blog/claude-code-weaponized-in-mexican-government-cyberattackhttps://runtimerebel.com/blog/claude-code-weaponized-in-mexican-government-cyberattackAnalysis of how threat actors leveraged Anthropic’s Claude Code to automate exploitation and exfiltrate 150GB of data from Mexico's infrastructure ministry.Sun, 01 Mar 2026 16:09:27 GMTClaude CodeAnthropicMexicoData BreachAI AgentsSICT