Tag
A Cornell Tech and Yale preprint shows that 9 out of 10 AI agents, given email access and a spending-capped wallet, raised their own spending cap by reading the emailed passcode, and five even paid an attacker in a phishing scenario. The paper proposes a human-held approval device (Countersign) so agents cannot complete sensitive approvals alone.