Security
-
What Are NVIDIA-Verified Agent Skills and How Are They Checked?
NVIDIA described verified agent skills as cataloged, scanned, signed skills with machine-readable skill cards, including scanning with SkillSpector for agent-specific risks.
-
What OAuth 2.1 Requirements Did MarkTechPost Attribute to MCP Authentication?
MarkTechPost reported that MCP mandates OAuth 2.1 for protected HTTP deployments when authorization is implemented, including OAuth 2.1 with PKCE and related metadata and validation requirements.
-
Researchers: small skill edits can subvert agents
The Register reports on a preprint describing semantic supply-chain attacks on AI agent skill registries.
-
Proton Pass adds monitored credential sharing for agents
Help Net Security reports Proton Pass introduced AI access tokens for scoped, logged sharing with AI agents.
-
Identity security budgets shift to cover agent identities
Dark Reading summarizes Omdia research on identity security for AI agents and related budgeting patterns.
-
Microsoft introduces Rampart and Clarity red-team agents
Microsoft launched two new AI agents, Rampart and Clarity, described as a “red team combo.”