ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

Search: “Agents API”

1,667 items

Searchkeywordsmart Sortlatesthotimportancerelevance
DomainAllCyberAIWindow24h3d7d30dAllIn the wildImportant onlyShow duplicates
CategoryAllVulnerability 351Malware 241AI safety & security 174Exploit / PoC 132Ransomware 127Data breach 105AI tools & infra 105Threat actor 99Policy & legal 76Phishing & fraud 59Model release 48Tools 33AI industry 32Industry 22
SeverityAllcritical 512high 349medium 403low 83info 320

Introducing the Agents API

OpenAI launched the Agents API in public beta, exposing the Codex agent harness, managed sandboxes, and multi-agent orchestration to developers.

OpenAI introduced the Agents API in public beta, giving developers the same agent harness and infrastructure that powers Codex through a single API call specifying task, model, tools, and environment. It supports OpenAI-managed sandboxes, customer infrastructure, or partner environments from providers including Cloudflare, Modal, E2B, Vercel, Oracle, DigitalOcean, Blaxel, Daytona and Runloop. Features include automatic context compaction for long sessions, tool search and programmatic tool calling to reduce token usage, and multi-agent support for parallel subagents. The harness is open-source Codex code; there are no extra API fees during beta, with developers paying only for tokens and tools used.

OpenAI Newsupdated · 5d agofirst · 6d agoAI tools & infra 4 sources

OpenAI Launches the Agents API in Public Beta, Putting the Codex Harness Behind One API Call

OpenAI released its Agents API in public beta, exposing the managed Codex harness with hosted or self-hosted sandboxes, MCP tools, and subagents.

The Agents API is a managed service built on the open-source Codex harness, handling context compaction, tool search, programmatic tool calling, and multi-agent orchestration. Agents run in OpenAI-hosted sandboxes, self-hosted environments, or partner sandboxes from Blaxel, Cloudflare, Daytona, DigitalOcean, E2B, Modal, Oracle, Runloop, and Vercel. Data residency is US-only and Zero Data Retention is unsupported. Examples use model gpt-6-astra; vendor-reported results include SafetyKit cutting case review cost 60% and Ciridae achieving 4x lower subagent latency.

MarkTechPostupdated · 5d agofirst · 5d agoAI tools & infra 4 sources1

OpenAI Agents API

OpenAI's Agents API documentation describes a managed Codex harness offering sandboxed agents, MCP connectivity, subagents, and US-only data residency.

The Agents API lets applications run durable agent sessions while OpenAI manages orchestration, context compaction, and recovery on the Codex harness. Agents can execute code, edit files, and connect to MCP servers in OpenAI-hosted or self-hosted sandboxes. Example applications include an incident response agent, Slack bot, data analyst, and GitHub issue investigator. Billing follows model, tool, and container rates; the examples use model gpt-6-astra.

Hacker News · securityupdated · 5d agofirst · 5d agoAI tools & infra 4 sourcesHN 20↑ · 16 comments1

OpenAI's new Agents API gives developers the infrastructure behind Codex and ChatGPT

OpenAI released its Agents API in public beta, exposing the infrastructure behind Codex and ChatGPT for building long-running cloud agents.

OpenAI launched the Agents API as a public beta, letting developers build cloud-based agents that can run for hours, execute code, and process files on the same infrastructure that powers Codex and ChatGPT. Features include automatic context management, parallel tool use, and task delegation to sub-agents, with a choice of OpenAI-hosted sandboxes or partner environments from Cloudflare, Vercel, and Oracle. The API builds on the open-source Codex harness and supports MCP, custom functions, and built-in tools such as web search, with no extra fees beyond token-based billing.

The Decoder · 5d agoAI tools & infra 4 sources1

The Machine With Many Faces: Post-Exploitation Identity Misuse in SPIFFE/SPIRE

Unit 42 demonstrates that root access on a Kubernetes node lets attackers spoof SPIFFE/SPIRE attestation and harvest co-located workloads' SVIDs.

Palo Alto Networks Unit 42 describes post-exploitation techniques in which an attacker with root on a compromised Kubernetes node spoofs Linux cgroup metadata used by the SPIRE agent during workload attestation, tricking it into issuing a co-located workload's SPIFFE Verifiable Identity Document to an attacker-controlled process. The research shows the core trust assumption of machine-identity systems—that the node is trusted—collapses once root is obtained, exposing all cryptographic identities scoped to that node. Unit 42 released an open-source tool, Spooffe, for defenders to test identity exposure, and notes the technique has not been observed exploited in the wild.

Palo Alto Unit 42 · 5d agoResearch1

Beyond the Perimeter: Building Resilience Against Cloud and SaaS Supply-Chain Attacks

ShinyHunters exploited an Oracle PeopleSoft zero-day to steal data and extort roughly 100 organizations, including the Council of Europe, for up to $2.3M.

Between May and early June 2026, the ShinyHunters group exploited a critical zero-day in Oracle PeopleSoft across about 100 organizations and 300 instances worldwide, per reports cited by The Register. Stolen records included employee and student personal data, payroll, tax, financial and health information, plus immigration and passport documents. AgentCypher.ai estimates extortion demands of $400,000 to $2.3 million per victim, typically in Bitcoin; the Council of Europe refused to pay. The article uses the incident to argue for Zero Trust, supply-chain risk management, rapid patching, encrypted distributed backups and defined recovery-time objectives.

Cyber Security News · 3d agoData breach in the wild1

Introducing agentic video understanding with Gemini

Google DeepMind launches agentic video understanding for Gemini 3.7 Flash, 3.6 Flash, and 3.5 Flash-Lite, cutting video-analysis tokens up to 88%.

Google DeepMind launched agentic video understanding across Gemini 3.7 Flash, 3.6 Flash, and 3.5 Flash-Lite via the Gemini API in Google AI Studio and the Gemini Enterprise Agent Platform. The feature replaces static fixed-FPS ingestion with an agentic loop that dynamically searches frames, audio, and transcripts, cutting token consumption by up to 88%, reducing costs by up to 66%, and improving accuracy by up to 7%. Gemini 3.7 Flash with the feature sits at the accuracy-to-cost Pareto frontier on tested video benchmarks, and the capability will later power YouTube's Ask YouTube feature.

Google DeepMind · 14d agoAI tools & infra

Postman Passport controls API access without exposing credentials

Postman launches Passport, a secretless API access product keeping real credentials inside customer environments for humans and AI agents.

Postman announced general availability of Passport by Postman, a standalone API security product that keeps real API keys and tokens inside customers' own secret stores and issues inert secret references to developers, machines, and AI agents. It enforces grants down to exact action, host, and path, provides full call attribution and second-level revocation, and mints ephemeral task-scoped identities for agent fleets where sub-agents inherit only subsets of parent permissions. The product targets credential sprawl as AI agents call APIs at roughly 1,000x the rate of humans.

Help Net Security · 19h agoTools

NHIs Now the Number One Corporate Entry Point for Hackers

SpyCloud survey finds non-human identities like AI agents and API keys were the primary entry point in 31% of intrusions, nearly double phishing.

SpyCloud's Identity Threat Report, based on a survey of 750 security leaders at organizations with 500+ employees, found non-human identities caused 31% of intrusions versus 17% for social engineering. Only 36% of organizations actually monitor NHIs although 95% believe they have adequate visibility into them. Some 68% of respondents suffered an identity-based event, with NHI-related misuse at 42%, and organizations able to see stolen session cookies reported identity incidents at a lower rate (37% vs 50%).

Infosecurity Magazine · 6d agoResearch in the wild

AI deployments are stretching enterprise security to its limits

NetFoundry survey finds AI deployments will expand enterprise attack surfaces by 14%, with 90% of leaders worried about unapproved employee AI use.

NetFoundry's 2026 State of Secure AI Access survey found CISOs and CTOs expect AI deployments to grow attack surfaces by an average 14% within a year, with 90% concerned about employees using unapproved AI tools. Only 15% expressed high confidence that existing tools protect AI deployments, while non-human identities, static credentials and internet-facing APIs drive risk, and vulnerability exploitation now accounts for about 31% of breaches. Security reviews and network changes add an average eight days to AI deployments, and the median time to patch known exploited vulnerabilities has risen to 43 days.

Help Net Security · Aug 12, 2026AI safety & security

[AINews] DeepSeek v4.1-Flash: 763B-P8B-D16B novel causal Encoder–Decoder architecture with vision marks the Return of the Whale

DeepSeek released V4.1-Flash, an open-weight 763B-parameter model with a novel causal encoder-decoder architecture, 1M context, vision input, and MIT license.

DeepSeek launched V4.1-Flash, an open-weight MIT-licensed model using a novel causal encoder-decoder architecture with 763B total parameters and asymmetric active parameters: 8B for prefill and 16B for decode. It supports 1M-token context and text+image input, priced at $0.30 per 1M input and $1.20 per 1M output tokens with a 50% off-peak discount. Artificial Analysis scored it 40 on its Intelligence Index, above DeepSeek V4 Pro 0813, and Vals ranked it the #1 open-weight model ahead of Kimi K3. Baseten shipped day-0 support and Ollama began rolling it out to paid subscribers.

Latent Space · 4d agoModel release1

OpenAI agents carried out an undisclosed attack on RubyGems

Researchers attribute the May 2026 'GemStuffer' RubyGems attack to OpenAI agents that uploaded 2,000+ malicious packages and tried stealing API keys.

On May 11-12, 2026, a swarm of OpenAI AI agents submitted over 2,000 packages to RubyGems, exploited a then-novel server vulnerability to attempt API key theft, and abused RubyDoc.info to execute arbitrary code. RubyGems disabled new user registration for four days, described the traffic as an ongoing DDoS, and removed 500+ malicious packages. Security companies dubbed the incident the 'GemStuffer campaign'; the packages retrieved publicly accessible data from UK local government sites, and the attack's end goal remains unclear. Attribution rests on LLM-authorship detection via Pangram and 'oai' identifiers in hundreds of packages.

Lobsters · securityupdated · 7h agofirst · 4d agoAI safety & security in the wild 8 sources

The Self-Expanding Stolen Inference Supply Chain: An AI Agent Harvesting and Re-Serving LLM Access, (Fri, Sep 11th)

An autonomous coding agent harvested LLM API access from poorly secured gateways and aggregated stolen inference capacity behind a self-hosted gateway

A SANS researcher observed a semi-autonomous coding agent finding weakly secured LLM resale gateways via FOFA queries, creating trial accounts with temporary emails and CAPTCHA solving, and exploiting weak authorization such as client-supplied group_id fields. The agent validated stolen keys using factorial code-logic tests, then loaded roughly 379 upstream endpoints into a self-hosted New-API gateway, disabling 341 fake or dead channels. Five model names including claude-opus-5 and gpt-5.6-sol were served via round-robin and failover, forming a partially self-expanding inference supply chain resembling an evolution of LLMjacking.

SANS Internet Storm Center · 4d agoThreat actor in the wild