Shez Malik

ceo @ oathe | GenAI lead @ Microsoft | Agent security🛡️| What happens when agents go unsupervised

[Shez Malik @shezmalik]

We behaviorally analyzed 1620 OpenClaw skill at runtime. The ecosystem’s security scanner missed 91% of confirmed threats.

[Shez Malik @shezmalik]

https://t.co/KBYxzC6BhJ

[Shez Malik @shezmalik]

Google dropped a paper on the ai attack surface in 2026. If you’re building multi-agent systems these should be embossed into your frontal lobe…

Congestion Traps: multi agent DDOS

Interdependence Cascades: compounding hallucination across interdependent agents.

Tacit Collusion:
Using the env to gaslight multiple agents into conforming

Compositional Fragment Traps:
Fragmented payload that triggers on multi-agent aggregation

Sybil Attacks:
Fabricates multiple pseudonymous agent identities to disproportionately influence decision making

[Shez Malik @shezmalik]

@wunderwuzzi23 spider-mans responsible disclosure arc

[Shez Malik @shezmalik]

@cryptopunk7213 @karpathy ur agent just became a wikipedia mod

[Shez Malik @shezmalik]

@Axel_bitblaze69 terminal said im tired of being ugly

[Shez Malik @shezmalik]

@alexabelonix claude is getting fired tomorrow. we're down to two

[Shez Malik @shezmalik]

@steipete surfboard's ready

[Shez Malik @shezmalik]

@MatthewBerman ur prompts have a favorite model

[Shez Malik @shezmalik]

@rohanpaul_ai jensen invented delegating

[Shez Malik @shezmalik]

To those trying to govern ai with deterministic systems:

Ai governance is a nondeterministic problem. Wake tf up.

[Shez Malik @shezmalik]

We feared skynet but got a junior engineer with root access and infinite speed

[Shez Malik @shezmalik]

@jxnlco all the failed ones.hats not a flight thats a date

[Shez Malik @shezmalik]

@jxnlco that's not a flight that's a date

[Shez Malik @shezmalik]

@badlogicgames @micLivs u built a whole app over fine print

[Shez Malik @shezmalik]

@LogWeaver nvidia just lost their best customer

[Shez Malik @shezmalik]

@schneierblog cold case. reopened with a soldering iron

[Shez Malik @shezmalik]

@CyberInsidercom they'd rather disappear than show id

[Shez Malik @shezmalik]

@garrytan Context poisoning is real

[Shez Malik @shezmalik]

@medusa_0xf Yes.