Tag
low
threat
The Identity Problem Hiding in AI Agent Deployments
2 TTPsCrowdStrike highlights a critical identity management gap in AI agent deployments where current OAuth 2.1 tokens and JWT (RFC 9068) lack standardized mechanisms to represent an AI agent's instance identity, the user on whose behalf it acts, and their relationship, hindering fine-grained access controls, audit trails, and detection of out-of-scope actions.
exploited
OAuth 2.1 +31
ai
identity
cloud-security
zero-trust
2t
updated
critical
advisory
Unsecured Model Context Protocol (MCP) Server Deployments Expose AI Integrations
2 rules 8 TTPs 1 IOCUnsecured Model Context Protocol (MCP) servers, used to connect AI agents to enterprise tools, lack authentication and audit trails, leading to data exfiltration, private repo leaks, cross-tenant exposure, and remote code execution due to AI agents using valid user credentials to make API calls based on potentially poisoned context.
Claude +4
ai
mcp
zero-trust
data-exfiltration
rce
2r
8t
1i