// agent security

All signals tagged with this topic

Oct 6

AI Agents Face New Attack Surface Through Obscure Communication Protocol

The Model Context Protocol (MCP)—designed to let AI agents talk to each other and external tools—is being deployed widely without security vetting, creating a novel attack vector that resembles early internet infrastructure vulnerabilities. Unlike traditional software with mature security practices, agent-to-agent communication lacks established defensive patterns, meaning attackers can potentially hijack agents to perform financial transfers, access confidential data, or manipulate business processes at scale. Enterprise AI adoption is outpacing security governance, turning what should be a deliberate infrastructure decision into a deployment checklist item.

theme-ai ai safety agent security model capabilities

Jun 27

Google Warns of Hidden Traps as AI Agents Navigate the Web

Source: Search Engine Journal

Google's Gemini can now execute actions on user computers—clicking, typing, navigating—which creates a new attack surface. Malicious websites can inject hidden instructions that trick AI agents into performing unintended actions: exfiltrating data, making unauthorized purchases, spreading malware. This isn't theoretical. Agentic AI systems (those that take autonomous actions based on what they perceive) are inherently vulnerable to adversarial inputs that would be obvious to humans but opaque to models. Every major AI company is shipping agent capabilities this year. A large-scale compromise of an AI agent fleet would expose both the scale and the liability of autonomous AI systems operating on consumer devices.