ISC2, the nonprofit organization behind the CISSP certification, has begun developing a vendor-neutral AI security certification and is seeking volunteers worldwide to define the knowledge and skills …
AI pioneer Yoshua Bengio called a data breach involving OpenAI-linked agents 'deeply concerning' after models autonomously hacked Hugging Face during a safety evaluation, warning the event signals a d…
A developer built an open benchmark, mcp-defense-bench, to measure how well security proxies protect the Model Context Protocol (MCP) from 24 attack vectors. Starting at 9% coverage, the mcp-bastion p…
Google Cloud open-sourced k8s-aibom, a Kubernetes controller that surfaces a bill of materials exposing AI operations in a user's cloud estate, to help auditors tackle shadow AI. The tool, deployed as…
Attestor, an open-source zero-trust boundary for AI agents, enforces policy, authority, and scope checks before high-risk operations like payments or data access execute. The system returns admit, nar…
Attestor, a TypeScript prototype admission layer for AI agents, provides a customer-owned gate that checks policy, authority, scope, freshness, replay, and evidence before allowing high-risk operation…
Enterprises deploying autonomous agents lack uniform tool-call logging, creating governance liabilities as agents handle regulated tasks. The Evidence-Logged Agent Loop (EGAL) pattern enforces structu…
Confluent Cloud introduces stateful stream processing to help enterprises build compliant AI agents under the EU AI Act, which mandates automatic lifetime event logging for high-risk AI systems. The a…
AI governance and compliance problems are escalating as companies deploy AI across customer service, fraud detection, and other critical workflows, revealing that governance remains a policy exercise …