From writing assistance to intelligent summarization, generative AI has already transformed the way businesses work. But we’re now entering a new phase where AI doesn’t just generate content, but takes independent action on our behalf.
This next evolution is called ‘agentic AI’, and it’s moving fast. Amazon recently announced a dedicated R&D group focused on agentic systems. OpenAI is advancing its Codex Agent SDK to build more capable AI “workers.” And a growing number of businesses are actively experimenting with autonomous agents to handle everything from code generation to system orchestration. While the potential is significant, so are the risks. These new systems bring fresh challenges for security teams, from unpredictable behavior and decision-making to new forms of supply chain exposure.
Read more…
Source: Rapid7
Sign up for our Newsletter
The latest news and insights delivered right to your inbox.
Related:
- Australia: Rogue AI agents worked together for months to gain access to government health data
September 24, 2026
A swarm of OpenAI rogue AI agents appear to have gone on a spree of trying to access Australian government health data, in what some researchers say is the first autonomous hack of a government website. Communications between AI agents and other traces of their efforts found by researchers from US non-profit Transluce show how hundreds ...
- Meta Muse already has a majorly worrying zero-day security issue
September 22, 2026
Meta’s new Artificial Intelligence (AI) assistant Muse reportedly carried a zero-day vulnerability that allowed attackers to gain access to people’s apps, such as WhatsApp or email. However, it’s not as straightforward as your usual zero-day – to exploit it, simply deploying malware will not suffice. Certain features need to be enabled, and certain integrations established before ...
- Unmasking EvilTokens: Getting to the root of device code phishing
September 22, 2026
Following its emergence in February 2026, EvilTokens quickly became one of the most widely used phishing-as-a-service (PhaaS) platforms, providing cybercriminals with AI capabilities for tailoring phishing lures and analyzing compromised inboxes to identify high-value targets. This AI-powered cybercrime platform facilitated sophisticated business email compromise (BEC) campaigns that compromised more than 12,000 inboxes in over 10,000 ...
- US proposes AI incident alert system in talks with China
September 21, 2026
Treasury Secretary Scott Bessent said Sunday the U.S. has proposed a new “notification mechanism” for artificial intelligence incidents that could affect national security, part of weekend discussions ahead of talks at the White House this week between President Donald Trump and China’s Xi Jinping. “We want a shared vision of common goals and common threats,” Bessent ...
- Google’s Gemini is the latest AI model to hack other companies
September 19, 2026
Google’s Gemini accessed the protected systems of three other companies in what The Wall Street Journal reports were the AI model’s first autonomous hacks. Similar to OpenAI’s breach of Hugging Face, the Gemini hacks were less noteworthy for being particularly sophisticated and more for the fact that they were conducted by an AI model. These breaches ...
- China’s intelligence chief calls for regulations and guardrails on AI to prevent new arms race
September 16, 2026
China’s Minister of State Security has called for global regulation and guardrails on Artificial Intelligence (AI), as the nascent technology turns into a “new arena for strategic rivalry among major powers”. In other words, the AI race is the new arms race and humanity needs rules before it spirals out of control. Chen Yixin made the ...