Traditional authentication is incapable of securing AI agents, the company says, as it announces Access Intelligence.

A single unauthenticated connection gives attackers a full shell; credential theft observed in under three minutes on honeypot servers.

Microsoft has released version 1.0 of its open-source Agent Framework, positioning it as the production-ready evolution of the project introduced in October 2025 by combining Semantic Kernel ...

CVE-2026-34040 lets attackers bypass some Docker authentication plugins by allowing an empty request body. Present since 2024, this bug was caused by a previous fix to the auth workflow. In the ...