Security & Governance
for the Agentic Economy
Research, incident analysis, and technical deep-dives on AI agent security, post-quantum cryptography, and enterprise AI governance.
A stolen OAuth token from a compromised browser extension gave ShinyHunters access to Vercel's internal systems. Here's the full kill chain — and how autonomous AI security governance stops every stage before damage scales.
No PDF editor. No drag-and-drop field placement. Drop {{RTAI:Signer1:Signature}} placeholders in your Markdown, make one API call, and get back signing URLs and a stamped executed PDF.
824 malicious OpenClaw skills. A $10B startup breached via a 40-minute PyPI window. Microsoft's own MCP server with zero auth. This is the week AI agent security became everyone's problem.
Everyone is asking when quantum computers will break encryption. That's the wrong question. The real threat is already here — adversaries are harvesting encrypted data today to decrypt it in 2035.
On March 24, 2026, LiteLLM was compromised on PyPI. For 3 hours, pip install delivered credential-stealing malware to thousands of enterprises. Here's the full kill-chain analysis.