#ai security

Docker Urges Isolation and Governance for AI Agent Security

Docker has published a guide to five security risks that arise when AI agents are allowed to browse, run code and call tools with limited human oversight. They argue that the autonomy that makes agents useful also makes conventional application security controls insufficient. The company positions isolation and governance, rather than model improvements alone, as the main defences. By Matt Saunders

InfoQ · EN

http-terminator – AI-Assisted HTTP Request-Smuggling Discovery

http-terminator is PortSwigger's AI pipeline for discovering HTTP request-smuggling bugs. Which stages run, its dependencies, and its testing limits.

Darknet – Hacking Tools, Hacker News & Cyber Security · EN

CrowdStrike to shell out nearly $500M for 2 AI security startups as the market for securing agents takes off

CrowdStrike said it will buy Fiddler AI, which makes AI agent observability software, and Dreadnode, which helps companies automate AI security testing.

TechCrunch · EN