{"data":{"id":"3b7fd018-28fa-428d-a217-a64e8778aea4","title":"The Harness Is the Hard Part of Agentic Pentesting","summary":"Pentera argues that the harness around an AI model, not the model itself, is what makes agentic penetration testing safe and useful. The harness enforces scope, credential use and prompt-injection limits in deterministic code, and produces replayable exploit proof. The article cites the Hugging Face intrusion OpenAI disclosed in July as an example of what happens when that harness fails.","solution":"N/A -- no mitigation discussed in source.","labels":["security","industry"],"sourceUrl":"https://thehackernews.com/2026/10/the-harness-is-hard-part-of-agentic.html","publishedAt":"2026-10-21T10:32:40.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"info","attackType":["prompt_injection"],"issueType":"news","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":["OpenAI"],"affectedVendorsRaw":["Pentera Apps","OpenAI","Hugging Face"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-10-21T10:32:40.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["integrity","confidentiality"],"aiComponentTargeted":"agent","llmSpecific":false,"classifierConfidence":0.8,"researchCategory":null,"atlasIds":["AML.T0051"]}}