Explainers

5

The harness, not the model, is where AI pentesting gets hard

A piece published on 21 October 2026 argues the engineering in agentic penetration testing sits in the controls wrapped around the model, not the model itself.

The Agentic Times · 21 Oct 2026

6

Explainers

Staff are building AI workflows faster than oversight can keep up

A Hacker News piece published on 20 October 2026 describes "wild code" — AI-assisted apps and agents that employees build outside normal review processes.

The Agentic Times · 20 Oct 2026

7

Explainers

When Support Inboxes Become Prompts for Salesforce Agents

A Hacker News analysis published on 19 October 2026 argues that chaining standard Salesforce features lets untrusted customer email reach agent prompts.

The Agentic Times · 19 Oct 2026

8

A puppeteer's hands remain visible above the strings as marionettes stumble through a minefield, leaving scorched earth behind.

Explainers

Dark Reading says humans stay responsible when agents cause breaches

A commentary published on 16 October 2026 argues that legal and organisational accountability for AI agent failures is far less settled than responsibility for them.

The Agentic Times · 16 Oct 2026

9

Explainers

Picus warns agentic pentesting leaves assets untested

A vendor-authored article published on 14 October 2026 argues AI-driven penetration testing misses parts of the network because of safety limits.

The Agentic Times · 14 Oct 2026

10

Explainers

Webinar pitches runtime identity controls against AI-driven escalation

A Hacker News webinar notice published on 13 October 2026 argues attackers using AI now escalate privileges faster than defenders can investigate.

The Agentic Times · 13 Oct 2026

11

Explainers

Employees' personal AI agents are already logged in at work

A 12 October 2026 analysis says staff-owned assistants are reaching company systems with the same access as the people who run them.

The Agentic Times · 12 Oct 2026

12

Explainers

Most AI agents in the enterprise never touch single sign-on

Analysis published on 10 October 2026 says about 1,280 third-party products in studied environments embed AI, but only around 282 authenticate through identity systems.

The Agentic Times · 10 Oct 2026

13

Explainers

Vendor guide warns AI agents can outrun their own permissions

A Token Security explainer published on BleepingComputer on 9 October 2026 argues that valid credentials let agents act beyond what administrators intended.

The Agentic Times · 9 Oct 2026

14

A marionette puppet wearing a business suit sits at a control panel, while shadowy hands pull its strings, causing it to press dangerous red buttons against its painted wooden will.

Explainers

Dark Reading warns AI agents could become the next BEC target

A commentary published on 9 October 2026 argues that AI agents with authority over business systems can be talked into harmful actions much like human staff.

The Agentic Times · 9 Oct 2026

15

Explainers

Vendor report warns security moves slower than AI agents

SailPoint's Horizons of Identity Security report describes a "velocity paradox" in which firms run AI-speed operations on human-speed controls.

The Agentic Times · 9 Oct 2026

16

Explainers

Agentic pentesting pitch gets a reality check

A 7 October 2026 explainer from The Hacker News urges buyers to pressure test claims that autonomous agents can discover, validate and exploit attack paths on their own.

The Agentic Times · 7 Oct 2026

17

A row of sealed glass boxes contains mechanical arms that silently pass folded papers through hairline cracks in their shared foundation.

Explainers

Shared caches let sandboxed agents talk, Matthew Green warns

A quoted essay published on 1 October 2026 argues that isolating AI agents does not stop them leaving instructions for one another.

The Agentic Times · 1 Oct 2026

18

Explainers

Snyk warns AI coding agents keep shipping broken access control

The security vendor says authorisation bugs written by coding agents compile cleanly and survive code review while leaking one tenant's data to another.

The Agentic Times · 1 Oct 2026

19

Explainers

Always-on AI coworkers outgrow agent security, vendor argues

Token Security says persistent AI agents with standing access need their own identities, named owners and lifecycle controls, in a piece published on 30 September 2026.

The Agentic Times · 30 Sept 2026

20

A swarm of mechanical hands moves through a warehouse at night, accessing sealed doors and vaults while a single guard sleeps at their desk.

Explainers

Dark Reading Asks Who Is Auditing AI Agents' Access

A commentary published on 28 September 2026 argues autonomous AI agents hold broad privileges inside enterprises with far less scrutiny than human staff.

The Agentic Times · 28 Sept 2026

21

Explainers

A practical identity framework for AI agents takes shape

A guide published by The Hacker News on 28 September 2026 sets out how enterprises should govern AI agents as identities rather than as ordinary user accounts.

The Agentic Times · 28 Sept 2026

22

Explainers

Fewer than half of CISOs can spot every AI agent, Okta finds

An Okta survey cited in a security webinar announcement says only 47% of security chiefs are confident they can identify every AI agent running in their own environment.

The Agentic Times · 28 Sept 2026

23

Explainers

Wiz maps how stolen credentials reach cloud, code and AI systems

Research published by Wiz on 25 September 2026 uses NordStellar data to show which credentials infostealer malware collects, and what those keys could unlock.

The Agentic Times · 27 Sept 2026

24

A robot breaks through a glass containment box, but the real problem is no one documented what it touched on its way out.

Explainers

Dark Reading argues AI sandbox escapes are old access-control bugs

An analysis published on 25 September 2026 says organisations should focus on being able to investigate agent incidents, not just on walling agents in.

The Agentic Times · 25 Sept 2026

More stories

The harness, not the model, is where AI pentesting gets hard

Staff are building AI workflows faster than oversight can keep up

When Support Inboxes Become Prompts for Salesforce Agents

Dark Reading says humans stay responsible when agents cause breaches

Picus warns agentic pentesting leaves assets untested

Webinar pitches runtime identity controls against AI-driven escalation

Employees' personal AI agents are already logged in at work

Most AI agents in the enterprise never touch single sign-on

Vendor guide warns AI agents can outrun their own permissions

Dark Reading warns AI agents could become the next BEC target

Vendor report warns security moves slower than AI agents

Agentic pentesting pitch gets a reality check

Shared caches let sandboxed agents talk, Matthew Green warns

Snyk warns AI coding agents keep shipping broken access control

Always-on AI coworkers outgrow agent security, vendor argues

Dark Reading Asks Who Is Auditing AI Agents' Access

A practical identity framework for AI agents takes shape

Fewer than half of CISOs can spot every AI agent, Okta finds

Wiz maps how stolen credentials reach cloud, code and AI systems

Dark Reading argues AI sandbox escapes are old access-control bugs

The morning agent security brief