InfoQ - Information Security - News

Edera's Object Capability Bounded Authority Promises to Isolate Credentials from AI Agent Workloads

Olimpiu Pop — Fri, 06 Nov 2026 06:06:00 GMT

Edera announced Object Capability Bounded Authority, a security model that separates an AI agent's or MCP server's required authority from the credentials behind it. Hypervisor-enforced capabilities limit agents to specific actions without storing secrets in the workload. Initial releases cover scoped command execution and workload identity; credential-brokered API access will follow.

By Olimpiu Pop

Google Discloses PageBreak AI Security Agent That Found 500+ XSS Bugs

Renato Losio — Sat, 31 Oct 2026 06:20:00 GMT

According to a paper published by Google, its AI-powered security agent has uncovered more than 500 XSS vulnerabilities across its web applications since entering full operation in January. PageBreak uses Gemini models to autonomously investigate potential vulnerabilities, but reports them only after deterministic validators successfully reproduce the exploit against a running application.

By Renato Losio