You gave your AI agent access, but who is giving it orders?
-
AI agents granted access to email, browsers, and plugins can be manipulated through malicious content into executing commands, stealing data, or deleting files — all using permissions the agent already holds. Gen Digital describes this risk in the context of its Agent Trust Hub, which is designed to protect agents through skill verification, secure connectivity, and runtime controls that intercept dangerous actions.
The core concern is straightforward: once an agent has legitimate access, the attack surface shifts from breaking in to influencing what the agent does with that access. Malicious emails, websites, and plugins are the delivery mechanisms, and the agent's own permissions do the rest.
Gen Digital's approach centers on three layers:
- Skill verification, to check what an agent is capable of doing
- Secure connectivity, to control how it reaches external services
- Runtime controls, to intercept dangerous actions as they happen
Source: BleepingComputer
Does your organization have any runtime controls in place for AI agents that hold elevated permissions?
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login