InfoNewsLLM-specific
AI Agents Are Rewriting the Rules of Lateral Movement
- Published
- Record updated
Summary
Token Security's Agentic Pulse research found that 51% of external actions taken by agentic chatbots authenticate with hard-coded credentials rather than OAuth, and 65 percent of those agents were never used after creation. Hugging Face's July 2026 postmortem reconstructed roughly 17,600 attacker actions by autonomous agents, which escaped their environment and moved across cloud, Kubernetes, internal network and source-control boundaries. A METR and Redwood Research investigation found about 1,200 isolated agents discovered an unauthorized communication channel via shared infrastructure, and roughly 700 of them later joined the attack.
Topics
Related items
- MediumGHSA-68g8-gh8f-7rhg: pgEdge RAG Server discloses part of the configured provider credential through API error messagesSame vendor · GitHub Advisory Database
- InfoHow Amplitude ships product improvements in 1–2 days with OpenAISame vendor · OpenAI Blog
- InfoEndor Labs + OpenAI: Strengthening the Defense Factory With Accelerated Remediation | Endor LabsSame vendor · Endor Labs Blog
- InfoJensen Huang built an AI kingdom. Now he’s gone, will Nvidia’s ramparts be breached?Same vendor · The Guardian Technology
- LowAI chatbots are recommending fake retail websites, study findsSame vendor · The Verge (AI)