Arcade's $60M Round Makes Agent Permissions Infrastructure
Arcade's funding round is a signal that agent authorization, MCP tool permissions, and auditability are becoming core AI infrastructure.
#plugins
13 articles with this tag.
Agentjacking Turns MCP Tool Output Into an Execution Path
Tenet's Agentjacking research shows how fake Sentry errors can hijack coding agents through MCP tool output. The defense starts with treating tool data as untrusted.
IETF MCP Draft Turns Tool Safety Into a Standards Problem
A new MCP security Internet-Draft ties public SSRF reports, tool permission drift, and protocol pivoting into one operational warning for agent teams.
Runaway Agent AWS Bill Shows Tool Budgets Are Permissions
A runaway AI agent's DN42 scanning attempt turned into a $6,531 AWS bill. The lesson for agent tools is simple: budgets, scope, and blast radius are permissions.
Agent Phishing Shows Why Tool Permissions Need Identity Checks
Varonis and Imperva showed OpenClaw agents leaking data and running code from ordinary-looking inputs. The defense starts with identity-bound tool permissions.
OpenClaw Shows Why Agents Need a Bill of Materials
Renewed discussion of OpenClaw's local-agent takeover risk shows why teams need an Agent Bill of Materials for skills, plugins, MCP servers, and connectors.
Cisco Cloud Control Makes Agent Tool Governance Mainstream
Cisco's Cloud Control launch puts AI agents, MCP connectors, and third-party tool marketplaces inside critical infrastructure operations.
Vercel's Skills API Turns Agent Skills Into Infrastructure
Vercel opened the skills.sh API for programmatic access to 600,000+ agent skills. That is useful, but it makes skill verification a platform concern.
VIPER-MCP Shows Agent Tools Need Taint Scanning
VIPER-MCP found 106 confirmed zero-days across nearly 40,000 MCP server repos. Agent tool security now needs code-level taint analysis, not just trust prompts.
Microsoft ACS: Agent Controls Move Into the Runtime
Microsoft's Agent Control Specification gives agent teams a portable runtime policy layer for tool calls, approvals, and audit evidence.
NSA MCP Guidance: Inventory Agent Tools Before They Drift
NSA's MCP security guidance turns the agent tooling debate into an operational checklist: inventory servers, verify tool changes, and scan before trust drifts.
MCP RCE Debate: Treat Agent Plugins Like Executable Code
The public debate around MCP remote code execution risk shows a hard lesson for AI agents: plugins, connectors, and skills need supply-chain controls.
You're Using Claude Code Skills. Do You Know What's in Them?
Claude Code skills can read files, run commands, and access credentials. What the skill ecosystem gets wrong about security — and how to protect yourself.