Glossary
Protocol pivoting is server-side request forgery through an AI agent's tools: a tool fetches a URL the agent supplies from inside your network, so whoever steers the agent reaches systems they could not reach directly.
Glossary
Ambient credentials are credentials any code can pick up just by running in a place, such as the cloud metadata service, environment variables or another process's memory, and AI agents that run code inherit them.
Glossary
Repo-planted agent config is a settings file committed inside a code repository that makes an AI coding agent or IDE run commands when a developer opens or works in the project.
Glossary
Branch steering hijacks an AI agent without injecting any instructions: the agent's approved plan stays intact, but attacker-controlled data picks a harmful branch within it.
Glossary
A fail-closed control blocks an action when it cannot reach a decision, because it crashed, timed out or lacked data, instead of letting the action through.