Oso

Visibility and controls to secure agents.

[Oso @osoHQ]

Our research with @cyera_io shows that humans are grossly over-permissioned. Imagine what will happen if agents inherit human permissions? https://t.co/cGdtNWTwVl

[Oso @osoHQ]

We never fixed least privilege for humans. We didn't have to because humans are slow, they sleep, they have judgment. That's not the case with agents.

[Oso @osoHQ]

We recently joined the AI security podcast to discuss why human least privilege fails for AI agents: https://t.co/pyYruk9rs6

[Oso @osoHQ]

It's a busy week for the Agents Gone Rogue registry https://t.co/N9Eu5ToAIf

[Son Luong @sluongng]

Codex just found a “workaround” of not having sudo on my pc…

[Oso @osoHQ]

@brcyrr https://t.co/dnZPhPjtFq

[Son Luong @sluongng]

Codex just found a “workaround” of not having sudo on my pc…

[Oso @osoHQ]

@brcyrr https://t.co/4OhD0DZOU6

[impulsive @weezerOSINT]

meta gave their AI support agent the ability to modify your instagram account. no identity verification. people figured this out and accounts are being taken over right now

[Burcu YARAR @brcyrr]

Today's suggestion ❗️💁🏻‍♀️

The biggest risk in AI may not be a hacked system.

It may be an agent that pursues its goal in ways we never intended.

Uncontrolled. Tricked. Weaponized ⁉️

A fascinating read on where AI security is heading:

https://t.co/FUrzi77eqz 🔗

Credit: @osoHQ 🌟🙌🏻
Have a great week! 💃🏻

#cybersecurity #infosec #AISecurity #AIAgents #AIRisk #ArtificialIntelligence #resourcesharing #RogueAIAgentDB #learningeveryday

[Oso @osoHQ]

Meta's AI customer support agent was granted the ability to modify Instagram account details. Adding it to the Agents Gone Rogue registry: https://t.co/D2aR5pi2Go

[impulsive @weezerOSINT]

meta gave their AI support agent the ability to modify your instagram account. no identity verification. people figured this out and accounts are being taken over right now

[Oso @osoHQ]

@cyera_io While humans will ignore those permissions, agents won't. Read the full research report and & recommendations: https://t.co/cGdtNWTwVl

[Oso @osoHQ]

We recently collaborated with @cyera_io on research that shows that 96% of permissions go unused:

https://t.co/SvJsfVzaUL

[Oso @osoHQ]

Complete Agents Gone Rogue registry: https://t.co/N9Eu5ToAIf

[Oso @osoHQ]

A new addition to our 🤖 Agents Gone Rogue registry: A critical (CVSS 10.0) vulnerability in Google's Gemini CLI let attackers achieve remote code execution through CI/CD pipelines processing untrusted PRs or issues — no privileges, no user interaction required.

[Oso @osoHQ]

Full details: https://t.co/goWViH3lr5

[Oso @osoHQ]

New additions to our NYC HQ:

[Oso @osoHQ]

Agents won't leave the other 91% untouched. Full research available at https://t.co/cGdtNWTwVl

[Oso @osoHQ]

Employees only interact with 9% of the sensitive data they have access to.

Now imagine an AI agent inheriting those permissions.

[Oso @osoHQ]

Thanks to everyone who stopped by Oso & @monad_inc's Security Leaders Breakfast as part of #AIWeekNY this morning!

[Oso @osoHQ]

Here's a copy of his letter to the congressman:

[Oso @osoHQ]

Oso CEO @grahamneray joined Kyle McNulty on the Secure Ventures podcast to talk agent security... as well as meeting Representative Barney Frank as a 10-year old: https://t.co/wtzUwpqiII