Optus 2022: 9.8M Records, One Unauthenticated API, Zero Exploits
Australia’s second-largest telco exposed ~9.8M customer records via an API left unauthenticated in production. No zero-day, no phishing — just enumeration.
AI agent security attack surface
AI Agent Security: The New Attack Surface in 2026
AI agents are the new attack surface: goal hijacking, tool abuse, memory poisoning, and delegation escalation — plus the five-layer defense framework that catches what WAFs and code review can’t.