https://www.oktsec.com/research Incident analysis, reproducible labs and product research on AI agent authorization, MCP security, identity, evidence and software supply chain risk. en Wed, 14 Oct 2026 13:57:52 GMT https://www.oktsec.com/research/ai-reverse-engineering-commodity https://www.oktsec.com/research/ai-reverse-engineering-commodity Wed, 14 Oct 2026 12:00:00 GMT Research AI reverse engineering and API security: six 2026 disclosures, lessons from Brelo and five practical checks for startups and enterprise teams. https://www.oktsec.com/research/legacy-controllers-cold-chain-attack https://www.oktsec.com/research/legacy-controllers-cold-chain-attack Wed, 14 Oct 2026 12:00:00 GMT Research What the French supermarket refrigeration attacks reveal about legacy OT. Verified sources, illustrated risks and practical access and inventory checks. https://www.oktsec.com/research/remote-hiring-identity-fraud-insider-threat https://www.oktsec.com/research/remote-hiring-identity-fraud-insider-threat Wed, 14 Oct 2026 12:00:00 GMT Research Remote hiring fraud, laptop farms and insider threats: what the FBI’s October 2026 alert establishes and how HR, IT and security can review identity and access. https://www.oktsec.com/research/cisa-integrity-tech-automated-hacking-data-theft https://www.oktsec.com/research/cisa-integrity-tech-automated-hacking-data-theft Sun, 11 Oct 2026 12:00:00 GMT Research Lessons from CISA advisory AA26-281A: how attackers access company email, what startups should fix first, and how enterprises can test their defenses. https://www.oktsec.com/research/ai-agent-evaluation-mitre-mission-testing-gap https://www.oktsec.com/research/ai-agent-evaluation-mitre-mission-testing-gap Wed, 07 Oct 2026 12:00:00 GMT Research Evaluate AI agents beyond model benchmarks. A practical guide based on MITRE’s AI Mission Testing Gap, with six workflow tests, controls and evidence. https://www.oktsec.com/research/cybersecurity-awareness-ai-agents https://www.oktsec.com/research/cybersecurity-awareness-ai-agents Tue, 06 Oct 2026 12:00:00 GMT Research A practical Cybersecurity Awareness Month guide for startups using AI agents. Clear examples, permission diagrams, an access card and a four-week checklist. https://www.oktsec.com/research/nsa-cyber-hygiene-ai-agent-security https://www.oktsec.com/research/nsa-cyber-hygiene-ai-agent-security Sun, 20 Sep 2026 12:00:00 GMT Research Cyber hygiene for AI agents: inventory MCP tools, limit permissions, monitor dependencies and verify fixes. Practical checks for startups and security teams. https://www.oktsec.com/research/owasp-agentic-skills-top-10 https://www.oktsec.com/research/owasp-agentic-skills-top-10 Sun, 20 Sep 2026 12:00:00 GMT Research Understand the OWASP Agentic Skills Top 10: malicious skills, permissions, scanner gaps and update drift. Practical examples, diagrams and eight security tests. https://www.oktsec.com/research/ai-coding-agent-security https://www.oktsec.com/research/ai-coding-agent-security Tue, 15 Sep 2026 12:00:00 GMT Research Secure AI coding agents with code tests, scoped tool permissions and dependency monitoring. A practical workflow with diagrams, evidence and Oktsec tools. https://www.oktsec.com/research/agentic-ai-harness-security https://www.oktsec.com/research/agentic-ai-harness-security Mon, 14 Sep 2026 12:00:00 GMT Research AI agent harness security explained: tool permissions, prompt injection, memory, approvals and audit evidence, with diagrams and practical tests based on ASD guidance. https://www.oktsec.com/research/dario-amodei-pace-frontier-agent-security https://www.oktsec.com/research/dario-amodei-pace-frontier-agent-security Sun, 13 Sep 2026 12:00:00 GMT Research Oktsec examines Amodei’s AI slowdown proposal, Altman and Musk’s responses, independent evaluation and practical release criteria for enterprise agents. https://www.oktsec.com/research/openai-enterprise-agent-security https://www.oktsec.com/research/openai-enterprise-agent-security Sat, 12 Sep 2026 12:00:00 GMT Research Oktsec analyzes OpenAI’s enterprise agent security guide: task-scoped permissions, MCP tool changes, independent controls and evidence of completed actions. https://www.oktsec.com/research/anthropic-threat-report-september-2026 https://www.oktsec.com/research/anthropic-threat-report-september-2026 Thu, 10 Sep 2026 12:00:00 GMT Threat analysis Anthropic’s September 2026 threat report: attack lifecycle, observed AI workflows and practical lessons for AI agent security and incident response. https://www.oktsec.com/research/openai-defense-factory-agent-security https://www.oktsec.com/research/openai-defense-factory-agent-security Thu, 10 Sep 2026 12:00:00 GMT Research Oktsec’s analysis of OpenAI’s Defense Factory: continuous security validation, agent permissions, isolated runtimes and proof that deployed patches work. https://www.oktsec.com/research/anthropic-cyber-incidents-agent-permissions https://www.oktsec.com/research/anthropic-cyber-incidents-agent-permissions Wed, 09 Sep 2026 12:00:00 GMT Incident analysis Anthropic’s September 2026 cyber incident assessment: agent permissions, biased reasoning, monitoring limits and practical tests for out-of-scope actions. https://www.oktsec.com/research/metr-ai-incident-investigation https://www.oktsec.com/research/metr-ai-incident-investigation Wed, 09 Sep 2026 12:00:00 GMT Research Oktsec’s view of METR’s AI incident investigation proposal: reconstruct agent actions, verify access decisions and test fixes against independent records. https://www.oktsec.com/research/model-distillation-api-access https://www.oktsec.com/research/model-distillation-api-access Tue, 08 Sep 2026 12:00:00 GMT Threat analysis A practical look at model distillation, API abuse and agent fallback routes, based on the September 2026 NSA, CISA and FBI advisory. https://www.oktsec.com/research/agent-governance-gap-in-numbers-2026 https://www.oktsec.com/research/agent-governance-gap-in-numbers-2026 Thu, 03 Sep 2026 12:00:00 GMT Research A review of agent governance surveys, telemetry and guidance, with sample sizes, source limitations and practical control questions. https://www.oktsec.com/research/agent-incidents-august-2026 https://www.oktsec.com/research/agent-incidents-august-2026 Thu, 03 Sep 2026 12:00:00 GMT Incident analysis Five incident and test reports, plus Microsoft guidance: distinct failure paths, controls that held and practical tests for agent deployments. https://www.oktsec.com/research/ai-generated-tooling-industrial-control-systems https://www.oktsec.com/research/ai-generated-tooling-industrial-control-systems Fri, 21 Aug 2026 12:00:00 GMT Threat analysis AI-assisted industrial attack tooling in advisory AA26-231A: documented behavior, evidence limits and practical access controls. https://www.oktsec.com/research/when-agents-leave-the-sandbox https://www.oktsec.com/research/when-agents-leave-the-sandbox Thu, 06 Aug 2026 12:00:00 GMT Incident analysis What AISI’s cyber evaluation revealed about agents acting outside scope. Review internet access, tool permissions and containment before deployment. https://www.oktsec.com/research/mcp-2026-07-28-security-boundary https://www.oktsec.com/research/mcp-2026-07-28-security-boundary Tue, 28 Jul 2026 12:00:00 GMT Protocol analysis The 2026-07-28 MCP specification removes protocol sessions and leaves state integrity, authorization and resource controls to each implementation. https://www.oktsec.com/research/agent-autonomy-security-boundary https://www.oktsec.com/research/agent-autonomy-security-boundary Tue, 21 Jul 2026 12:00:00 GMT Research Approval, supervision, bounded autonomy and recovery impose different controls. A framework for assigning authority to each consequential action. https://www.oktsec.com/research/jadepuffer-agentic-ransomware https://www.oktsec.com/research/jadepuffer-agentic-ransomware Tue, 21 Jul 2026 12:00:00 GMT Threat research Sysdig documented what it assesses as the first agentic ransomware operation: a familiar exploit chain, an adaptive loop and a compressed response window. https://www.oktsec.com/research/openai-hugging-face-evaluation-incident https://www.oktsec.com/research/openai-hugging-face-evaluation-incident Tue, 21 Jul 2026 12:00:00 GMT Incident analysis In an internal cyber evaluation, OpenAI models found a path from a constrained research network into Hugging Face production. The containment boundary failed. https://www.oktsec.com/research/how-to-audit-a-claude-skill https://www.oktsec.com/research/how-to-audit-a-claude-skill Fri, 03 Jul 2026 12:00:00 GMT Research Read SKILL.md, bundled scripts, referenced URLs and requested permissions the way an attacker would, before the skill enters your environment. https://www.oktsec.com/research/how-to-secure-an-mcp-server https://www.oktsec.com/research/how-to-secure-an-mcp-server Fri, 03 Jul 2026 12:00:00 GMT Guide A practical MCP security guide: authenticate callers, limit tool capabilities, inspect untrusted content, isolate execution and preserve useful audit records. https://www.oktsec.com/research/authorization-telemetry-for-ai-agents https://www.oktsec.com/research/authorization-telemetry-for-ai-agents Fri, 03 Jul 2026 12:00:00 GMT Research How to instrument the authorization decision on every agent tool call and export identity, tool, arguments and policy verdict through OpenTelemetry. https://www.oktsec.com/research/how-exposed-are-mcp-servers https://www.oktsec.com/research/how-exposed-are-mcp-servers Fri, 03 Jul 2026 12:00:00 GMT Research What public repository scans, internet exposure studies and attack benchmarks establish about MCP risk, with their sampling limits. https://www.oktsec.com/research/what-the-research-shows-defending-agents https://www.oktsec.com/research/what-the-research-shows-defending-agents Fri, 03 Jul 2026 12:00:00 GMT Research What PromptArmor, CommandSans, CaMeL and adaptive-attack studies establish about prompt injection defenses, including their test conditions and limits. https://www.oktsec.com/research/how-agent-security-benchmarks-score https://www.oktsec.com/research/how-agent-security-benchmarks-score Fri, 03 Jul 2026 12:00:00 GMT Research Compare AgentDojo, InjecAgent, ASB and MCP security benchmarks. Understand attack success rates, test scope and legitimate task completion before choosing defenses. https://www.oktsec.com/research/anatomy-of-the-agent-tooling-cves https://www.oktsec.com/research/anatomy-of-the-agent-tooling-cves Fri, 03 Jul 2026 12:00:00 GMT Research Seven CVEs illustrate distinct failures in configuration loading, path handling and client/server trust, with links to vendor advisories. https://www.oktsec.com/research/detection-versus-authorization https://www.oktsec.com/research/detection-versus-authorization Thu, 02 Jul 2026 12:00:00 GMT Research Detection can identify and block threats. Authorization checks permissions. How to combine both with isolation and reliable evidence. https://www.oktsec.com/research/agent-identity-stack https://www.oktsec.com/research/agent-identity-stack Wed, 01 Jul 2026 12:00:00 GMT Research A scoped review of signed Agent Cards, enterprise-managed access, task authorization research and the integration work needed for runtime attribution. https://www.oktsec.com/research/evidence-for-agent-work https://www.oktsec.com/research/evidence-for-agent-work Wed, 01 Jul 2026 12:00:00 GMT Research What an AI agent audit trail can prove: connect access decisions to execution records and review recorded Oktsec Node tests for intact, altered and incomplete evidence. https://www.oktsec.com/research/the-agent-supply-chain https://www.oktsec.com/research/the-agent-supply-chain Wed, 01 Jul 2026 12:00:00 GMT Research The agent supply chain is every artifact an agent pulls into your environment: packages, MCP servers, skills and the trust behind them. https://www.oktsec.com/research/skills-over-mcp-trust https://www.oktsec.com/research/skills-over-mcp-trust Wed, 01 Jul 2026 12:00:00 GMT Research Skills over MCP: how SEP-2640 addresses manifests, provenance and approval, and what permissions the host still needs to enforce. https://www.oktsec.com/research/mcp-identity-layer https://www.oktsec.com/research/mcp-identity-layer Wed, 01 Jul 2026 12:00:00 GMT Protocol analysis MCP moves authorization context from the connection to each request. Security still depends on how every server implements identity and policy. https://www.oktsec.com/research/agent-identity-revisited https://www.oktsec.com/research/agent-identity-revisited Wed, 01 Jul 2026 12:00:00 GMT Research A2A v1.0 signed Agent Cards, MCP enterprise managed authorization and task scoped token prototypes: what is available, proposed and still missing. https://www.oktsec.com/research/what-an-mcp-server-actually-exposes https://www.oktsec.com/research/what-an-mcp-server-actually-exposes Thu, 28 May 2026 12:00:00 GMT Guide A practical, audit grounded map of tool surfaces, credentials, network reach and the trust boundaries that decide your real attack surface. https://www.oktsec.com/research/prompt-injection-is-an-authorization-problem https://www.oktsec.com/research/prompt-injection-is-an-authorization-problem Tue, 12 May 2026 12:00:00 GMT Note How content inspection, explicit permissions and isolation address different parts of prompt injection risk in tool-using agents. https://www.oktsec.com/research/mcp-supply-chain https://www.oktsec.com/research/mcp-supply-chain Fri, 01 May 2026 12:00:00 GMT Research Five boundaries to review before and after connecting an MCP server: tool descriptions, permissions, authentication, dependencies and runtime changes. https://www.oktsec.com/research/runtime-policy-enforcement https://www.oktsec.com/research/runtime-policy-enforcement Wed, 01 Apr 2026 12:00:00 GMT Engineering How runtime policy checks identity, tools, parameters and destinations, alongside scanning, isolation and audit records. https://www.oktsec.com/research/litellm-supply-chain-attack-mcp-defense https://www.oktsec.com/research/litellm-supply-chain-attack-mcp-defense Tue, 24 Mar 2026 12:00:00 GMT Incident analysis Updated September 2026: LiteLLM’s supply chain attack, FBI guidance, CloudSEK exposure estimates, publishing changes and MCP credential security. https://www.oktsec.com/research/security-product-decision https://www.oktsec.com/research/security-product-decision Sun, 01 Mar 2026 12:00:00 GMT Product essay The most consequential call a technical founder makes is what not to ship. Agent security cannot wait for an incident to become part of the product. https://www.oktsec.com/research/csa-agentic-trust-framework https://www.oktsec.com/research/csa-agentic-trust-framework Thu, 26 Feb 2026 12:00:00 GMT Research Apply the CSA Agentic Trust Framework to agent identity, permissions, oversight and evidence. Practical review questions and the limits of framework adoption. https://www.oktsec.com/research/agent-skills-ecosystem-trust https://www.oktsec.com/research/agent-skills-ecosystem-trust Sun, 01 Feb 2026 12:00:00 GMT Field note A practical review model for public agent tooling: permissions, provenance, install paths, version pinning and change over time. https://www.oktsec.com/research/agent-identity-crisis https://www.oktsec.com/research/agent-identity-crisis Sun, 01 Feb 2026 12:00:00 GMT Research How workload identity, delegated authority and per-tool records help attribute agent actions, with a review of available standards.