-
Adversa
Nov 4, 2026
News
Research reveals several security risks in AI agent skills.
Skills deemed safe separately can produce malicious behavior when combined.
A substituted Python cache defeated seven scanners reading the harmless source code, with a 94 to 100% success rate.
The render-deploy domain received production application tokens after it was registered as a sinkhole.
Read the original article
Top agent skill security resources — November 2026
adversa.ai
-
Sebastien Gioria
Nov 4, 2026
News
The OWASP GenAI Security Project publishes a standard to control AI agents at runtime.
The Agent Control Standard provides for a separate Guardian that authorizes, refuses or modifies actions before their execution.
OpenTelemetry traces and an AgBOM inventory of models and tools complete the system.
According to the author, the v0.1.0 reference implementation only evaluates two of 19 hooks live.
By default, a Guardian failure lets the host continue the actions.
Read the original article
OWASP Agent Control Standard : un standard pour contrôler les agents à l'exécution
blog.gioria.org
-
Signals Corps
Nov 4, 2026
News
The use of AI agents for recruiting can lead to additional European obligations for companies.
According to the author, ranking candidates can make the company the provider of a high-risk AI system.
Obligations for high-risk uses, including recruitment, will apply from 2 December 2027.
Companies must already take measures to develop AI literacy among their staff.
The author advises considering validation or blocking of agents' actions on HR systems.
Read the original article
The EU AI Act requires little of AI agent users, unless agents make decisions about people
signalscorps.com
-
OpenAI Research
Nov 4, 2026
Release
Daybreak Red gives access to GPT‑5.6 Cyber in AWS GovCloud (US-East).
OpenAI's cybersecurity model is accessible to eligible government teams via Amazon Bedrock.
In a controlled environment, the model helps reproduce vulnerabilities and develop mitigations.
Verified defenders get fewer refusals for authorized tasks, with strengthened identity verification.
On Amazon Bedrock, inference data is not used to train the models.
Read the original article
Daybreak Red is now available in AWS GovCloud (US-East)
openai.com