Agent security
6 posts tagged with “Agent security”
What I Check Before I Install a Claude Plugin on a Client's Computer
What I Check Before I Install a Claude Plugin on a Client's Computer
A Claude consultant's pre-install checklist for small businesses: who made it, what it tells Claude to do, what it runs, what it touches, what Claude finds when it reviews it, where it gets tested, and who keeps track.
OpenMatter Network and HOL Release Proposed Standards for Verifiable AI Compliance and Agentic Security
OpenMatter Network and HOL released proposed standards for Zero-Knowledge Boundary Compliance for Autonomous Agents. Public comment is open through October 31, 2026.
HOL Guard 2.1: 51,000 Test Cases, HMAC-Backed Reconnect, and a New Command Classification Engine
HOL Guard 2.1 ships a 51,000-case command classification corpus, HMAC-backed dashboard reconnect, signed Codex hook manifests, DNS-pinned archive downloads, and a typed GitHub capability model — all open source, canary-tested on TestPyPI.
MCP Tool Poisoning: How the AI Agent Protocol Became a Supply Chain Attack Surface
The MCP protocol connects AI agents to over 10,000 tools. It also creates a new supply chain attack surface: poisoned tool descriptions that silently hijack agent behavior. Here's the data, the CVEs, and what to do.
Prompt Injection Defense in 2026: What Works Beyond Detection
Prompt injection remains an unresolved structural risk for AI agents. This guide covers defense in depth across trust boundaries, permissions, validation, sandboxing, runtime policy, supply-chain checks, and monitoring.
Slopsquatting: When AI Hallucinations Become Supply Chain Attacks
AI coding assistants hallucinate package names 19.7% of the time. Attackers register those names on npm and PyPI before real packages can claim them. Tens of thousands of developers have already installed malicious packages their AI suggested. Here is how the attack works, what the research shows, and how to stop your team from becoming the next victim.