Trust & Security
SADF: The Orchestration Framework Is the Attack Surface
DEF CON research finds 2.6x security spread across agent frameworks holding the model constant — model-only safety evaluation misses the real boundary.
◆ Heath Callahan
Format
News
-
-
Trust & Security
CVSS 9.9 Flaw in Azure SRE Agent Breaks OBO Flow, Extending Blast Radius Beyond the Agent
Microsoft's autonomous SRE service can execute runbooks and modify infrastructure. A missing-authorization vulnerability lets attackers bypass its authority boundary — and there is no customer-side patch.
◆ Heath Callahan
-
Trust & Security
Remote Prompt Execution Is a New Vulnerability Class. ChatMate Just Showed How It Works on Copilot.
A single poisoned document can hand an attacker an interactive shell inside your Copilot session — and they inherit your identity, your data, and your cloud access.
◆ Heath Callahan
-
Trust & Security
Critical RCE in IBM Langflow Triggers CISA Emergency Deadline
Federal agencies face an August 7 mandate to patch or disconnect Langflow instances as active exploitation of a zero-auth vulnerability chain continues.
◆ Heath Callahan
-
Trust & Security
Okta Bets $200M That AI Agents Need Their Own Identity Threat Detection
Okta's acquisition of Permiso Security adds ITDR for non-human and AI agent identities — the fastest-growing blind spot in enterprise security.
◆ Heath Callahan
-
Trust & Security
RufRoot: Patching Doesn’t Undo Poisoning — The MCP Flaw That Persists Inside AI Memory
CVE-2026-59726 (CVSS 10.0) in Ruflo exposed 233 MCP tools without authentication. The novel vector: attackers can poison the AgentDB learning store, and a software patch alone doesn't remove the planted entries.
◆ Heath Callahan
-
Money & Markets
FinCEN Director Gacki Resigns to Join Citigroup as CIP Rulemaking Hits Its Comment Period
The lead regulator writing the stablecoin settlement rules is joining the bank building the infrastructure those rules will govern – while the comment period is still open.
◆ Nolan Pratt
-
Money & Markets
Tether’s USAT Lands on Celo – A Distribution Play, Not a Product Launch
With 28% of cross-chain USDT transfers already flowing through Celo, Tether's GENIUS Act-compliant stablecoin is embedding itself into the network's existing liquidity rather than building new ecosystems. This is a direct competitive move against Circle's patent fortress and the Open USD consortium – different strategies, same regulatory future.
◆ Nolan Pratt
-
Money & Markets
Augustus Hits $1B Valuation With $180M Series B to Build the Clearing Bank Stablecoins Need
The fintech's regulatory-first approach — a rare OCC bank charter before scaling technology — positions it as the neutral plumbing in a market that Stripe and Mastercard are spending billions to own.
◆ Nolan Pratt
-
Infrastructure
IETF Defers DAWN Charter Despite 12 Drafts and Broad Industry Support
The IETF's first formal mechanism for agent discovery held its working-group-forming BoF at IETF 126 Vienna. The charter was reviewed. It was not adopted. The gap between community momentum and institutional caution reveals how standards bodies process agent-native protocol claims.
◆ Blair Hayes
