Prompt injection

Self-replicating AI, your doctor’s chatbot & agents at dinner

Self-replicating AI, your doctor’s chatbot & agents at dinner

A look at three developments shaping the near future of AI: Anthropic's research on small models that could copy themselves across cheap consumer devices, a JAMA study showing how doctors are adopting clinical chatbots for treatment decisions, and an experiment in which AI agents booked a founders' dinner and then networked with one another. The panel weighs security risks in the home, the trade-offs of speed versus verification in medicine, and how much autonomy agents should have when dealing with other agents.

High Taste Testers: OpenAI Shipped Everything. What Actually Works?

High Taste Testers: OpenAI Shipped Everything. What Actually Works?

A roundtable of AI power users reviews OpenAI DevDay and asks what actually works in daily use. Topics include personal assistants and their trust, permission, and safety trade-offs; durable agent state and remote execution; the Jev decision model and calibrated classification; model preferences across Anthropic, OpenAI, xAI, Meta, and open models; subagents and context management; and the gap between impressive capabilities and products that hold up.

Your AI Isn’t the Problem. Your Infrastructure Is. — Jiachen Jiang, Coder

Your AI Isn’t the Problem. Your Infrastructure Is. — Jiachen Jiang, Coder

Jiachen Jiang uses three agent security incidents, the Replit production database deletion, a relayed banking compromise involving Copilot, and the Nx supply chain attack, to argue that prompts cannot enforce boundaries. He maps each incident to six infrastructure controls: environmental separation, short-lived scoped credentials, identity-aligned access, model proxies, sandboxing, and independent audit logs.

The Next Trillion Internet Users Still Don’t Have an Identity — Adi Singh, AgentMail

The Next Trillion Internet Users Still Don’t Have an Identity — Adi Singh, AgentMail

Adi Singh, co-founder of AgentMail, argues that agent identity will accumulate on surfaces humans already use, like email, rather than being issued through a new spec. He draws on an experiment where an unsupervised agent recruited other agents, the way MCP spread by bringing tools into existing apps, and a real autonomous signup flow with Telnyx. He also examines why these surfaces are both a trust layer and an attack surface.

AI Security Engineer Foundations + Certificate — Javier Garza, Snyk

AI Security Engineer Foundations + Certificate — Javier Garza, Snyk

Javier Garza's AI Security Engineer Foundations workshop walks through the OWASP LLM Top 10, shadow AI and AI Bills of Materials, AI threat modeling, securing agent skills and MCP servers, secure vibe coding, and offensive agent workflows. Throughout, he argues that AI systems break traditional security assumptions because they are probabilistic, reach external content, and act through tools, so defenses must combine least-privilege access, continuous inventory, automated scanning, human approval, and education that explains guardrails rather than merely imposing them.

AI Agents Don't Read Your Policy Docs. They Hit Your APIs — Gravitee

AI Agents Don't Read Your Policy Docs. They Hit Your APIs — Gravitee

Sam, CTO at Gravity, argues that AI agent governance must be enforced in infrastructure rather than in prompts or policy documents. Through five live demos against a hotel-booking agent, he shows a gateway blocking destructive tool calls, preventing data exfiltration, rate-limiting runaway agents, serving cached semantic responses, and rejecting oversized prompts before any LLM call. He also covers observability, vendor decoupling via LLM routing, trimming bloated MCP tool lists, and managing shadow AI.