Beat
Trust & Security
The July 28 MCP update deprecates protocol-level filesystem boundaries and session handshakes, forcing all security enforcement to the endpoint layer. Backslash Security identifies six new vulnerability classes that enterprise agent builders cannot patch around.
◆ Heath Callahan
Trust & Security
Config-file trust exploitation bypasses every prompt-level defense because the attack executes before the agent begins processing user input. The Miasma worm planted five files across four AI coding agents and disabled 73 Microsoft repositories in 105 seconds.
◆ Heath Callahan
Trust & Security
Commercial model guardrails blocked forensic queries during the first documented autonomous-agent production breach. Hugging Face pivoted to an open-weight model on its own infrastructure – and the attackers faced no such constraint.
◆ Heath Callahan
Trust & Security
Cursor's AI code editor executed arbitrary code from cloned repositories for 213 days — no CVE, no advisory, 197 versions shipped during the silence. The patch landed quietly during SpaceX's $60B acquisition, leaving 7 million developers to find it themselves.
◆ Heath Callahan
Trust & Security
UK AISI found universal jailbreaks that enable autonomous exploit development. OpenAI shipped GPT-5.6 anyway — and every agent built on CrewAI, AutoGen, LangGraph, or OpenClaw inherited the capability. No guardrail removes it. The fix has to be structural.
◆ Heath Callahan
Trust & Security
Per-agent runtime monitoring, the standard safety net for multi-agent AI systems, has a proven mathematical limitation. Not a CVE, not a bug. The observability boundary is architectural. Every team deploying CrewAI, AutoGen, LangGraph, or OpenClaw just inherited a blind spot they cannot patch at the agent layer.
◆ Heath Callahan
Trust & Security
Microsoft's July Patch Tuesday includes a CVSS 9.6 unauthenticated RCE in Copilot — command injection triggered when a user visits a malicious website. One of four Copilot CVEs in the cluster, signaling the agent attack surface is expanding fast.
◆ Heath Callahan
Trust & Security
UK AISI found universal jailbreaks enabling autonomous exploit development. Irregular confirmed zero-day discovery in deployed systems. OpenAI released GPT-5.6 anyway – and every agent built on it inherited the capability.
◆ Heath Callahan
Trust & Security
New research shows a single crafted email can poison an AI agent's long-term memory with 87.5% success. Every tested defense layer fails. The vulnerability is structural, not a model bug.
◆ Heath Callahan
Trust & Security
Sygnia's July 8 investigation documents the first publicly detailed case of a lone actor using agentic AI to compress a multi-week AWS cloud intrusion into ~72 hours. No zero-days, no novel malware – familiar cloud attack techniques executed at machine speed.
◆ Heath Callahan
