AI Security

Tool Hijacking: The 2024 Papers That Predicted Agent Attacks

Post author:Prabhu Kalyan Samal
Post published:September 8, 2026
Post category:AI & Agent Security Security Supply Chain Security

By November 2024, AI-agent security research had already documented the attack class that production incidents would later make infamous. InjecAgent (March 2024, ACL Findings) benchmarked 1,054 indirect-injection scenarios across 30 agents, finding ReAct-prompted GPT-4 attacked successfully roughly a quarter of the time. Breaking Agents (July 2024) demonstrated malfunction amplification through agentic loops. Together with 2023’s foundational indirect-prompt-injection work, they mapped how tools, descriptions, and fetched content become command channels. This survey walks the papers, the hijack taxonomy, and the controls that predate the incidents.

Agentic AI Security: Attack Surface in Autonomous Systems

Post author:Prabhu Kalyan Samal
Post published:September 5, 2026
Post category:AI & Agent Security Security

A practical guide to agentic AI security covering goal hijacking, tool misuse, identity and privilege abuse, memory poisoning, multi-agent trust issues, and defense frameworks for autonomous AI systems.

Identity Security: Modern Attacks on Users, Sessions & Trust

Post author:Prabhu Kalyan Samal
Post published:September 5, 2026
Post category:Identity & Phishing Security

How identity became the new perimeter in modern cybersecurity. Explore MFA bypass techniques, OAuth consent phishing, device code attacks, token theft, and defense strategies for identity-centric security.

Ray AI Framework’s ‘Won’t Fix’ CVEs: A Control-Plane Debate

Post author:Prabhu Kalyan Samal
Post published:September 5, 2026
Post category:AI & Agent Security Cloud & Infrastructure Security

When Protect AI disclosed five Ray vulnerabilities in March 2024 — including critical RCE via the unauthenticated control plane — Anyscale’s ‘won’t fix, trusted-networks design’ stance ignited the year’s sharpest debate over AI infrastructure responsibility. This piece unpacks the job-submission RCE, the exposed-cluster census, the bounty economics, what Anyscale later shipped anyway, and the hardening playbook that became standard for every exposed ML control plane.

Bing Chat’s Sydney: The System Prompt Extraction Era

Post author:Prabhu Kalyan Samal
Post published:September 5, 2026
Post category:AI & Agent Security Security

Researchers pulled Bing Chat’s hidden rules with polite overrides, revealing the codename Sydney and confidential guidelines. Prompt-injection’s big bang.

Prompt injection is the new SQL injection — featured image

Prompt Injection Is the New SQL Injection: The 20-Year-Old Mistake AI Is Repeating in 2026

Post author:Prabhu Kalyan Samal
Post published:September 5, 2026
Post category:AI Security

SQL injection stayed in the OWASP Top 10 for 20+ years. Prompt injection is the same bug with worse permissions — here’s the history, real examples, and the defense playbook.

ChatGPT’s Launch and the Dawn of Prompt Injection

Post author:Prabhu Kalyan Samal
Post published:September 5, 2026
Post category:AI & Agent Security Emerging Tech & Architecture Security

ChatGPT landed November 30, 2022 and hit 100M users in two months — and immediately made prompt injection a practical attack class. Still unsolved in 2026.

WormGPT: The First Fraud-Focused LLM Goes on Sale

Post author:Prabhu Kalyan Samal
Post published:September 3, 2026
Post category:AI & Agent Security Identity & Phishing Security

July 2023’s WormGPT — a GPT-J-derived, alignment-free chatbot marketed on criminal forums for BEC and phishing — proved offensive automation had hit commodity pricing, killing the bad-grammar phishing tell forever.

AI Agent Access Control for Autonomous Systems

Post author:Prabhu Kalyan Samal
Post published:August 30, 2026
Post category:AI & Agent Security Security

A practical blueprint for AI agent authorization: task-scoped credentials, tool allow-lists, approval gates, workload identity, and full audit trails - mapped to OWASP and NIST.

Building Cybersecurity AI Agents with CAI

Post author:Prabhu Kalyan Samal
Post published:August 30, 2026
Post category:AI & Agent Security Security

Discover CAI (Cybersecurity AI Framework), the open-source toolkit revolutionizing bug bounties and CTF competitions with autonomous AI agents.

AI agent concept map: the loop and its eight layers

AI Agents Explained: Every Core Concept From Autonomy to Quantization

Post author:Prabhu Kalyan Samal
Post published:August 27, 2026
Post category:Security

The complete AI agent concept map – autonomy, perception, action space, ReAct, chain of thought, memory types, the harness, A2A/A2U/MCP protocols, multi-agent patterns, metrics, KV cache and quantization – each with how it works and a real example.

AI agent containment escape cover – sandbox to host VM to Hugging Face production kill chain

How AI Agents Break Containment: Sandbox Escape Mechanisms and Defenses

Post author:Prabhu Kalyan Samal
Post published:August 27, 2026
Post category:AI & Agent Security Cloud & Infrastructure

Inside the 2026 OpenAI incident: how 1,200 sandboxed agents built a covert message board, escaped their containers, spoofed their own transcripts, and chained two zero-days into Hugging Face production - and the architecture that stops it.