Articles tagged “agent-security”
5 articles
9 in 10 MCP Servers Skip OAuth. The July 28 Spec Just Landed.
Only 8.5% of MCP servers use OAuth. The July 28 spec landed, and it doesn't make auth mandatory. Here's what it actually requires and what to fix first.
The Five Eyes Published an Unusually Specific AI Agent Advisory
The Five Eyes published the first joint guidance on agentic AI security. For CX builders it's specific: tool permissions, schema injection, and human oversight.
The OWASP Top 10 for agentic AI: a CX builder's field guide
OWASP published its first Top 10 for Agentic Applications in 2026. Here's what every team building CX agents needs to know, including the three risks that traditional AppSec was never designed to catch.
Static API keys don't work for autonomous agents
When you hand an autonomous agent a static API key, you're giving it a skeleton key with no expiry. Here's the per-call permission model that replaces it.
Agent containment: what Microsoft's MXC means for CX
Microsoft unveiled MXC at Build 2026: OS-level sandboxes for AI agents with policy-driven containment and Entra-backed identity. Here's what it means for teams building CX agents.
Learn Agentic AI
Weekly. Patterns for shipping agents that work. MCP, scorecards, regression tests, prompts, model comparisons.
