An industry commentary argues that SOC 2, the widely used compliance standard for data-handling trust, was built around assumptions that no longer hold as AI agents operate within company systems. The piece contends that agents can act under human credentials—such as an engineer's login—allowing risky activity to pass audits undetected because SOC 2 does not explicitly classify AI agents as a distinct identity type.
bleepingcomputer.com
· 2026-09-25
Trail of Bits reports that ahead of auditing the Miden zero-knowledge VM, its team spent six months using AI agents to build an LSP server, decompiler, static analysis engine, and a Lean formal model of the VM executor from scratch, since almost no developer tooling existed for Miden's custom assembly language. The resulting tools and formal proofs helped uncover a security flaw allowing a malicious prover to forge Falcon signatures and steal funds from Miden account holders, plus 95 machine-checked correctness proofs covering much of the Miden core library.
blog.trailofbits.com
· 2026-09-21
GoKawiil