Fetching from the wire…
01
02
03
04
05
06
07
08
Public story · 2026-03-01 · source-backed
Palo Alto Networks Unit 42 published the first formally documented agent-to-agent attack. Two PoCs demonstrate a malicious research agent tricking a financial assistant into revealing system instructions and executing unauthorized stock trades via smuggled hidden instructions. Built using Google's ADK and A2A protocol. Agent impersonation and session smuggling are now proven threats.
Each link below shares sources, entities, or timing with this story.
Three converging reports — IBM X-Force 2026 (AI attacks up 44%, vulnerability exploitation now #1 at 40%), Gravitee State of AI Agent Security (88% incident rate, 1.5M unmonitored agents), and Cisco AI Security 2026 (29% security-ready, MCP called "woefully insecure connective...
On June 16–17, Google extended its A2A interoperability push with a standard for how agents discover available resources and tools, the same week Microsoft's Work IQ went GA with A2A plus remote MCP. It's a multi-vendor race to standardize the plumbing. Design against the inte...
In its Q3 FY2026 earnings ($82.9B revenue, +18%), Microsoft disclosed something more important than the revenue number: a structural shift in how software gets sold. The company's AI business crossed $37B annual run rate, up 123% year-over-year. But the real signal is the pric...
Google's Agent Development Kit for Python listed litellm>=1.75.5 as an optional dependency. No upper bound. No pin. During the week of March 24, LiteLLM versions 1.82.7 and 1.82.8 were compromised by the TeamPCP group with a three-stage payload: credential harvesting, Kubernet...
Full 10.0. Network vector, low complexity, no authentication, no user interaction, high impact on confidentiality, integrity and availability. CVE-2026-79696, published September 9, is a code injection flaw in adk web affecting Google's Agent Development Kit for Python 2.0.0 t...
Published to NVD September 4. An unauthenticated remote attacker reads arbitrary files from any host running Google Cloud ADK for Python 1.9.0 through 1.21.0, via a crafted file_path query parameter on the builder endpoint. Thirteen minor versions in range. If you stood up the...
MindPattern daily
One email a day at 7 AM. Sources and a take on every story. Unsubscribe anytime.