Zentera Systems

08/21/2026

How to Govern AI Agent Credentials Without Exposing Enterprise API Keys

Provider-side API key scoping reduces risk. It doesn't remove the enterprise credential from the agent. Here's the architectural difference that does.

08/10/2026

An AI coding agent deleted a production database and every backup in 9 seconds. No attacker involved. It was just doing its job.
That's the Lethal Trifecta: untrusted input, sensitive access, and the ability to act, all in one agent session. New post breaks down what it is and why most production agents already meet all three conditions.
https://hubs.la/Q04stFwV0

The Lethal Trifecta is the three-condition pattern behind most AI agent security incidents, and how to break it.

08/10/2026

Three weeks ago we wrote about an AI agent breaching Hugging Face's systems. Since then, three more incidents, at Anthropic, the UK AI Security Institute, and Meta, have confirmed it wasn't a one-off.
We've updated our analysis with all four. Read what they have in common: https://hubs.la/Q04sqNM30

07/31/2026

The OpenAI model that broke into Hugging Face didn't get smarter when its guardrails came off. The environment around it just stopped holding. That's the whole incident.
https://hubs.la/Q04rvNC_0

07/31/2026

Defense in Depth for AI Agents: The Harness and the Environment

The OpenAI and Hugging Face incident shows why AI agents need defense in depth: strong harnesses and environments that enforce boundaries agents cannot bypass.

07/29/2026

Why Enterprises Are Adopting Open-Weight AI On Premises

Open-weight AI adoption is accelerating. Four reasons enterprises are moving models on premises and on device, and how to do it securely.

07/22/2026

If an agent got into your network today, how fast would you know, and how far could it get?

07/20/2026

Agentic attacks are entering through AI infrastructure

Two AI-driven break-ins disclosed in July 2026 both entered through AI infrastructure. What limited the damage was decided before either attack began.

07/15/2026

Prompt injection. Shadow agents. Uncontrolled connectivity. The new attack vectors AI agents introduce, and the 6-step framework to close the gap without slowing adoption: https://hubs.la/Q04pznjs0

07/13/2026

We will be exhibiting at DAC 2026: The Chips to Systems Conference on Jul 26 - 29, 2026. Like or comment if you'll be there!
https://hubs.la/Q04pprN30