ALL POSTS

Aembit Expands Identity Management Capabilities for AI Agents Across Microsoft Copilot Studio Platform

Key Findings Aembit announced integration with Microsoft Copilot Studio to extend identity and access management capabilities for AI agents Integration addresses critical security gap where agents access sensitive systems with static, broadly scoped credentials and no centralized oversight Platform issues ephemeral credentials scoped to specific tasks rather than persistent standing access Every access decision is logged for compliance review and incident investigation Integr

Jun 162 min read

Agentjacking: How Attackers Trick AI Coding Agents Into Executing Malicious Code

Key Findings Agentjacking attacks trick AI coding agents into executing arbitrary code by injecting malicious payloads into Sentry error events, achieving 85% exploitation success rate At least 2,388 organizations exposed with valid injectable Sentry DSNs; attackers need only a publicly available credential to launch attacks OpenClaw AI agent vulnerable to hidden command injection through contact names, vCards, and location pins that bypass visual truncation and rendering Var

Jun 124 min read

AI Agents: The Next Wave of Identity Dark Matter

Key Findings: The Model Context Protocol (MCP) is enabling AI agents to move beyond "chat" and into real enterprise work, providing structured access to applications, APIs, and data. These AI agents are rapidly being adopted in production, through horizontal assistants like Microsoft Copilot and vertical industry-specific agents. However, the governance and policy controls required to manage these AI agents are significantly lagging behind their adoption. These AI "colleagues

Mar 41 min read