{"id":10837,"date":"2026-11-11T12:12:04","date_gmt":"2026-11-11T12:12:04","guid":{"rendered":"https:\/\/news.cybertechworld.co.in\/index.php\/2026\/11\/11\/we-built-an-agent-that-broke-all-of-our-security-rules-heres-what-we-learned\/"},"modified":"2026-11-11T12:12:04","modified_gmt":"2026-11-11T12:12:04","slug":"we-built-an-agent-that-broke-all-of-our-security-rules-heres-what-we-learned","status":"publish","type":"post","link":"https:\/\/news.cybertechworld.co.in\/index.php\/2026\/11\/11\/we-built-an-agent-that-broke-all-of-our-security-rules-heres-what-we-learned\/","title":{"rendered":"We Built An Agent That Broke All of Our Security Rules. Here&#8217;s What We Learned."},"content":{"rendered":"<p>\u200bWe tell customers three things about securing AI agents: they need their own identities, access that fits the job they\u2019re given, and traceability that\u2019s separate from any human\u2019s. That was true for us at Token as well. Then, we built an agent that broke all three by default.<\/p>\n<p>This helped us think through how such agents should be defended. When a browser agent acts inside a user\u2019s authenticated\u00a0We tell customers three things about securing AI agents: they need their own identities, access that fits the job they\u2019re given, and traceability that\u2019s separate from any human\u2019s. That was true for us at Token as well. Then, we built an agent that broke all three by default.<\/p>\n<p>This helped us think through how such agents should be defended. When a browser agent acts inside a user\u2019s authenticated\u00a0\u00a0The Hacker News<\/p>","protected":false},"excerpt":{"rendered":"<p>\u200bWe tell customers three things about securing AI agents: they need their own identities, access that fits the job they\u2019re given, and traceability that\u2019s separate from any human\u2019s. That was true for us at Token as well. Then, we built an agent that broke all three by default. This helped us think through how such&hellip;&nbsp;<a href=\"https:\/\/news.cybertechworld.co.in\/index.php\/2026\/11\/11\/we-built-an-agent-that-broke-all-of-our-security-rules-heres-what-we-learned\/\" class=\"\" rel=\"bookmark\">Read More &raquo;<span class=\"screen-reader-text\">We Built An Agent That Broke All of Our Security Rules. Here&#8217;s What We Learned.<\/span><\/a><\/p>\n","protected":false},"author":0,"featured_media":10838,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"neve_meta_sidebar":"","neve_meta_container":"","neve_meta_enable_content_width":"","neve_meta_content_width":0,"neve_meta_title_alignment":"","neve_meta_author_avatar":"","neve_post_elements_order":"","neve_meta_disable_header":"","neve_meta_disable_footer":"","neve_meta_disable_title":"","_themeisle_gutenberg_block_has_review":false,"footnotes":""},"categories":[1],"tags":[],"_links":{"self":[{"href":"https:\/\/news.cybertechworld.co.in\/index.php\/wp-json\/wp\/v2\/posts\/10837"}],"collection":[{"href":"https:\/\/news.cybertechworld.co.in\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/news.cybertechworld.co.in\/index.php\/wp-json\/wp\/v2\/types\/post"}],"replies":[{"embeddable":true,"href":"https:\/\/news.cybertechworld.co.in\/index.php\/wp-json\/wp\/v2\/comments?post=10837"}],"version-history":[{"count":0,"href":"https:\/\/news.cybertechworld.co.in\/index.php\/wp-json\/wp\/v2\/posts\/10837\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/news.cybertechworld.co.in\/index.php\/wp-json\/wp\/v2\/media\/10838"}],"wp:attachment":[{"href":"https:\/\/news.cybertechworld.co.in\/index.php\/wp-json\/wp\/v2\/media?parent=10837"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/news.cybertechworld.co.in\/index.php\/wp-json\/wp\/v2\/categories?post=10837"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/news.cybertechworld.co.in\/index.php\/wp-json\/wp\/v2\/tags?post=10837"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}