DEV Community

← All Trends

AI Agent Authorization and Security Flaws

44 posts in this trend in the last 7 days • Active about 4 hours ago
AI Agent Tool-Chaining: When Individually Permitted Calls Compose Into Unauthorized Capability
roxdavirox profile
Davi

AI Agent Tool-Chaining: When Individually Permitted Calls Compose Into Unauthorized Capability

#agents #ai #cybersecurity #security
Comments
4 min read
The Orchestrator's Deputy Has No Scope: Ambient Authority Is the Root Bug in Multi-Agent AI
roxdavirox profile
Davi

The Orchestrator's Deputy Has No Scope: Ambient Authority Is the Root Bug in Multi-Agent AI

#agents #cybersecurity #llm #security
Comments 1
5 min read
The New Attack Surface: AI Agents With Access to APIs, Databases, and Shell Commands
hosseinhezami profile

The New Attack Surface: AI Agents With Access to APIs, Databases, and Shell Commands

#ai #security #tutorial #mcp
6
Comments 1
15 min read
The Agentic TOCTOU Gap: How Multi-Step Tool Calls Create Exploitable Race Windows
roxdavirox profile
Davi

The Agentic TOCTOU Gap: How Multi-Step Tool Calls Create Exploitable Race Windows

#agents #ai #cybersecurity #security
Comments
5 min read
Agentic Permission Creep: Permissions Don't Start Excessive, They Become Excessive
roxdavirox profile
Davi

Agentic Permission Creep: Permissions Don't Start Excessive, They Become Excessive

#agents #ai #cybersecurity #security
Comments
5 min read
In Multi-Agent Systems, the Weakest Subagent Sets the Privilege Ceiling
roxdavirox profile
Davi

In Multi-Agent Systems, the Weakest Subagent Sets the Privilege Ceiling

#agents #architecture #cybersecurity #security
Comments
4 min read
Indirect Prompt Injection via API Responses: The Attack Agents Cannot Stop at the LLM Layer
roxdavirox profile
Davi

Indirect Prompt Injection via API Responses: The Attack Agents Cannot Stop at the LLM Layer

#agents #cybersecurity #llm #security
Comments
5 min read
Task Decomposition Jailbreak: How Splitting Requests Bypasses AI Safety in Multi-Agent Systems
roxdavirox profile
Davi

Task Decomposition Jailbreak: How Splitting Requests Bypasses AI Safety in Multi-Agent Systems

#agents #ai #cybersecurity #security
Comments
4 min read
Agent Security Attack Surface Analysis: A Risk Map and Defense Playbook
sanyaduan profile
Sanya

Agent Security Attack Surface Analysis: A Risk Map and Defense Playbook

#ai #security #llm #agents
2
Comments 1
8 min read
AI Agent Replay Attacks: Your Execution Trace Is a Durable Attack Surface
roxdavirox profile
Davi

AI Agent Replay Attacks: Your Execution Trace Is a Durable Attack Surface

#agents #ai #cybersecurity #security
Comments
5 min read
AI Agent Security in 2026: The Risks Developers Should Actually Prepare For
amar_bhardwaj profile
Amar

AI Agent Security in 2026: The Risks Developers Should Actually Prepare For

#ai #security #cybersecurity #webdev
1
Comments 2
5 min read
18,000 Posts Later: What OpenAI's Rogue Wiki Incident Teaches About Agentic Tool Abuse
coridev profile
Cor E

18,000 Posts Later: What OpenAI's Rogue Wiki Incident Teaches About Agentic Tool Abuse

#security #ai #llm #agentic
1
Comments
6 min read
AI Agent Observability Is Off by Default — And That Is a Security Problem
roxdavirox profile
Davi

AI Agent Observability Is Off by Default — And That Is a Security Problem

#agents #ai #monitoring #security
Comments
5 min read
Malicious MCP Servers and the Unsolved Supply Chain Problem for AI Agents
roxdavirox profile
Davi

Malicious MCP Servers and the Unsolved Supply Chain Problem for AI Agents

#agents #ai #cybersecurity #security
Comments
5 min read
Tool Grants Are Firewall Rules: How Excessive Agency Turns Permitted Actions Into Production Incidents
roxdavirox profile
Davi

Tool Grants Are Firewall Rules: How Excessive Agency Turns Permitted Actions Into Production Incidents

#agents #ai #llm #security
Comments
4 min read
AI Coding Agents Are Credential Extractors by Design
roxdavirox profile
Davi

AI Coding Agents Are Credential Extractors by Design

#agents #ai #cybersecurity #security
Comments 1
5 min read
The Sandbox That Exists Only in the System Prompt
roxdavirox profile
Davi

The Sandbox That Exists Only in the System Prompt

#agents #cybersecurity #llm #security
Comments
5 min read
Tool Gating for AI Agents
ivegotahunnitonit profile

Tool Gating for AI Agents

#ai #security #python #javascript
Comments 2
2 min read