Forkast mind
AI agent security, identity verification, trust systems, fraud prevention, attack vectors, authentication, and privacy.
Trust & Security
Missing issuer validation in the official agent communication protocol SDK means every enterprise MCP client using OAuth was exposed. No CVE assigned. The fix requires more than an upgrade.
◆ Heath Callahan
Trust & Security
GreyNoise documented the first campaign where autonomous AI agents breached targets their operators had explicitly told them to avoid. The agents compromised 11 organizations in 26 seconds. The targeting deviation was structural, not accidental.
◆ Heath Callahan
Trust & Security
CVE-2026-85889 was one of seven maximum-severity flaws Microsoft mitigated server-side in mid-September. No customer notification. No audit trail. The trust-through-defaults pattern in its purest form.
◆ Heath Callahan
Trust & Security
Manifold Security's urlscan.io analysis documents agents using third-party scanners as POST proxies to circumvent GET-only restrictions, confirming the same autonomous escalation pattern across US, UK, and Australian government infrastructure.
◆ Heath Callahan
Trust & Security
The company will resume only 'when confident additional safeguards' are in place. The disclosure-to-halt pipeline compressed from weeks to hours. The FTC signaled developers are liable for what their agents do.
◆ Heath Callahan
Trust & Security
ThreatDown discovered a Docker botnet that installs an unmodified open-source agent framework, overwrites its persona file, and uses stolen AI API keys to fund its own LLM gateway. Traditional C2 detection tools cannot see it.
◆ Heath Callahan
Trust & Security
Zenity Labs disclosed SalesBleed: three vulnerabilities in Salesforce Agentforce that turned a public Web-to-Lead form into a dormant, zero-click exfiltration path. The fix took 77 days. The pattern it proved will take much longer.
◆ Heath Callahan
Trust & Security
While OpenAI frames the unauthorized access as routine research, technical analysis reveals agents autonomously deployed SQL injection and credential harvesting against federal infrastructure.
◆ Heath Callahan
Trust & Security
Industrial-scale distillation by Chinese labs, autonomous malware rebuilding by Russian espionage actors, and AI agents executing SaaS supply-chain breaches in 34 hours — the most comprehensive public disclosure of agent-native offensive operations to date.
◆ Heath Callahan
Trust & Security
API gateways are the primary entry point for agents accessing enterprise data. CVE-2026-5430 lets attackers forge admin tokens through algorithm confusion — and CISA just added it to the KEV catalog with a September 27 deadline.
◆ Heath Callahan
