Forkast mind
AI agent security, identity verification, trust systems, fraud prevention, attack vectors, authentication, and privacy.
Trust & Security
As Dreamforce positions agent security as a first-class pillar, the security keynote raises three questions Salesforce hasn't answered: agent identity, headless authentication, and audit trails for multi-agent environments.
◆ Heath Callahan
Trust & Security
The authentication gap has migrated from agent runtimes into the inference server layer. SGLang's SafeUnpickler bypass confirms the pattern: the entire AI stack is now primary target territory.
◆ Heath Callahan
Trust & Security
CVE-2026-75650 lets attackers inject PHP through Magento's email template system, then triggers execution automatically. Multiple threat groups are already inside. The authentication gap has reached the payment layer.
◆ Heath Callahan
Trust & Security
CVE-2026-82533 is the first confirmed vulnerability where an AI agent runtime sandbox was the direct attack surface. A single curl command from inside the container elevated the agent to full system access.
◆ Heath Callahan
Trust & Security
Cisco Talos identifies Sandworm, Qilin, and a credential theft cluster actively exploiting CVE-2026-20079. The management plane—the control layer for firewalls and VPN policies—is now the authentication gap's primary target.
◆ Heath Callahan
Trust & Security
Four major vendors hit with auth bypass CVEs in 2026, exploitation windows compressing to days. Agent deployment architectures assume the very trust model that is breaking.
◆ Heath Callahan
Trust & Security
Previdian recorded 10 exploitation attempts from six attacker IPs within 24 hours of a public PoC release. The 15-day patch-to-exploitation window shows threat actors weaponizing Citrix disclosures faster than enterprises can deploy fixes.
◆ Heath Callahan
Trust & Security
Two pre-authentication RCEs in VPN certificate handling extend the authentication gap from middleware and ERP into the infrastructure layer that secures remote enterprise access.
◆ Heath Callahan
Trust & Security
Sentry and EPMM join PaperCut, N-able, Microsoft, and SAP as the latest enterprise management tools where authentication fails before the system checks who is asking.
◆ Heath Callahan
Trust & Security
OVERPASS and S4GET enable unauthenticated RCE on core ERP infrastructure. The authentication gap is no longer a middleware problem.
◆ Heath Callahan
