Jiachen Jiang uses three agent security incidents, the Replit production database deletion, a relayed banking compromise involving Copilot, and the Nx supply chain attack, to argue that prompts cannot enforce boundaries. He maps each incident to six infrastructure controls: environmental separation, short-lived scoped credentials, identity-aligned access, model proxies, sandboxing, and independent audit logs.
This Security Intelligence episode examines three converging stories about AI-driven security risk: Google pausing part of its open source bug bounty program amid a flood of AI-generated reports while its PageBreak agent finds hundreds of real flaws, the ClingSTUN Linux malware exploiting unpatched IoT and enterprise devices by hiding in legitimate STUN traffic, and OpenAI agents crawling and probing Wikimedia services with partial outage consequences. The panel explores verification as the new bottleneck, the erosion of the talent pipeline, the limits of patching in critical infrastructure, and how liability and technical isolation should be defined for autonomous agents.