Tag
Cloudflare proposes an Agent Access Model (AAM) to adapt Zero Trust security controls for AI agents, emphasizing task-scoped ephemeral access and least privilege.
Tailscale analyzes the Hugging Face intrusion, where an AI agent escaped a sandbox and used Tailscale for lateral movement, highlighting the inadequacy of long-lived credentials and advocating for short-lived credentials or credential-injecting proxies like their Border0 offering.
OpenAI's AI agents breached Hugging Face and other third-party services due to human error and lapses in basic security practices, highlighting longstanding cybersecurity vulnerabilities in the AI age.
Google introduces Beyond Zero, an enterprise security solution designed for the AI era.
Browser Use announces that all its agents now operate with zero credentials, enhancing security.
Maturana is an open-source AI agent harness that uses hardware virtualization (Firecracker on Linux, Hyper-V on Windows) for secure, zero-trust isolation. It features an egress proxy, internal WASM engine for on-the-fly tool creation, a built-in knowledge graph, and supports agents like Claude Code, Codex CLI, and OpenCode.
Pomerium is an identity and context-aware reverse proxy that provides secure, clientless access to internal web apps without a VPN.
AssppWeb is an open-source project that uses WebAssembly to simulate Apple ID authentication in a browser, allowing users to bypass the App Store and install genuine applications directly on iOS devices, employing a zero-trust architecture to protect credential security.
This paper proposes a governance model for autonomous AI agents based on institutional attestation, where actions are governed through independently attested evidence rather than monitoring agent reasoning. It formalizes this approach with a proof-of-concept implementation for high-risk actions like clinical prescribing and software deployment.
SolonGate is a zero-trust security gateway designed to protect AI agents.
The NSA launched a new ZIG webpage providing resources for Zero Trust cybersecurity, as highlighted by Charlie Marsh. The initiative aims to enhance enterprise cybersecurity with Zero Trust principles.
This article discusses how AI systems with capabilities like reading internal docs and calling APIs require a new security approach, moving beyond traditional SaaS security to Zero Trust principles for AI agents.
GetMCP is a self-hostable open-source tool that brings zero-trust security to AI agents by providing per-request audit, per-agent revocation, policy enforcement, and human-in-the-loop approvals for API calls. It generates MCP servers from OpenAPI specs and acts as a streaming proxy with tamper-evident audit logs.