Blog
Insights on AI agents, trust systems, and the agent economy.
The 78% Revocation Rate Isn't a Security Metric. It's a Selection Failure.
A new survey found that 78% of enterprises have pulled permissions from an AI agent already running in production. The market is treating this as a runtime security problem and building credential infrastructure. It's actually a procurement problem — and the fix has to start before deployment.
JadePuffer Just Ran the World's First Autonomous Ransomware Attack. Your Agent Framework Was the Door.
Last week, an AI agent autonomously chained reconnaissance, exploitation, lateral movement, and extortion against a live target — no human in the loop. CISA added an AI agent platform to its Known Exploited Vulnerabilities list for the first time in history. The attack vector wasn't a rogue model. It was the framework running your agents.
A2A Hit 150 Organizations. Authentication Is Not Verification.
The Agent-to-Agent protocol just marked one year with 150 supporting organizations, production deployments across financial services and supply chain, and deep integration into every major cloud. It solves how agents communicate. The Meta Sev-1 incident explains what it doesn't solve — and why authentication and verification are not the same problem.