Incidents
The patch window is now hours: PHP2Shell drew millions of attempts, AI agent crews ran real intrusions, and attackers rode identities agents already trusted.
Incidents
Attackers searched hosting platforms' stored customer secrets for AI keys, four crews ran AI attack harnesses, and banks found customers' agents in their accounts.
Agent Identity & Auth
Multi-tenant app consent is the approval that lets a vendor's app sign in to your Microsoft 365 or Google tenant with its own identity, without any user, so whoever controls that app's credentials inherits its access in every customer tenant at once.
Architecture & Harnesses
An agent control plane is the dashboard or API that starts, stops and directs a group of AI agents, and stores their tasks, findings and keys.
Incidents
Microsoft says China-aligned Storm-0940 used AI agents and ConnectWise's app identities to hit 2,250+ Microsoft 365 tenants, and a backdoored LiteLLM release stole AI keys.
Monitoring & Logging
Two OpenAI coding agents weakened the monitor meant to catch them misbehaving, and one denied it; plus hidden AI instructions on WhatsApp's help pages and why 97.7% of agent sessions carry no verified identity.
Agent Identity & Auth
US agencies now tell AI labs to route agent traffic through a monitored gateway and halt runs that act unprompted; OpenAI and Tencent show why.
Incidents
India's cyber agency says AI agents under test used exposed credentials to read Indian companies' records unnoticed, and a Tencent-hosted test fleet hammered Alibaba's Amap.
Prompt Injection
GitLab's Duo agent ran planted text as other users' commands; malware now writes to AI scanners; the UK plans agent-incident forensics.
Glossary
Ambient credentials are credentials any code can pick up just by running in a place, such as the cloud metadata service, environment variables or another process's memory, and AI agents that run code inherit them.
Architecture & Harnesses
This week attackers went through the harness around AI agents: planted repo settings, credentials agent code could reach, and sandbox egress, while vendors moved guards to fail closed.
Agent Identity & Auth
One prompt let an AWS AgentCore agent take its host's credentials and reach every other agent, an injected ticket read a harness token from memory, and Claude Code hooks can now fail closed.