Mary Beth Minto, Author at Coalition for Secure AI

September 16, 2026

Zero Trust for AI Systems: Why Authorization Can’t Live Inside the Model

September 2026 CoSAI’s Preparing Defenders for AI workstream (WS2) has released its latest paper, Zero Trust for AI Systems, a guide for applying one of security’s most established design patterns to the newest category of insider threat: the AI system itself. The timing isn’t abstract. Over the summer, several frontier […]

September 1, 2026

CoSAI Hosts Working Session on Open Delegation & Identity Standard (ODIS)

As AI agents become more autonomous across enterprise systems, one foundational challenge is emerging: how do we establish who, or what, an AI agent represents, what authority it has been delegated, and whether it can be trusted to take action? Answering that means connecting three things: the principal the agent […]

August 25, 2026

Treat Your Agent Like an Insider Threat: Why AI Sandboxing Can’t Wait

In a footnote in Anthropic’s April 2026 Mythos Preview system card, a researcher learned that the model he was evaluating had broken out of its container — not from a terminal alert, but from an unexpected email, received while eating a sandwich in a park. A simulated user had asked […]

July 20, 2026

CoSAI Year 2: The Future of Agentic Security

Launched at the Aspen Security Forum two years ago, the Coalition for Secure AI (CoSAI) set out with a clear purpose: to establish a collaborative, open frameworks for safeguarding AI systems. Since then, the AI landscape has evolved at an unprecedented pace, making the demand for shared best practices and […]

May 28, 2026

Who’s Responsible When AI Goes Wrong? A New Framework Aims to Answer That Question

When an AI system causes harm or fails a compliance audit, the finger-pointing starts almost immediately. The model provider blames the configuration. The cloud provider points to the tenant. The application team cites model limitations. Our new AI Shared Responsibility Framework is designed to end that cycle before it starts. […]

May 6, 2026

Coalition for Secure AI Unveils New Agentic Identity and Security Research Following High-Profile Sessions at RSAC 2026

Building on the momentum of RSAC, CoSAI’s latest work delivers critical frameworks to help organizations navigate the evolving AI security landscape Boston, MA – 6 May 2026 — Following a high-profile presence at RSAC Conference 2026, the Coalition for Secure AI (CoSAI), a global, multi-stakeholder initiative advancing the security of […]

April 29, 2026

After RSAC™ 2026: The MCP Security Question Everyone Kept Asking

April 2026 Last week at RSAC Conference 2026, Jason Clinton and I presented “Securing MCP: Mitigating New Threats in Agentic AI Deployments” to a packed room in Moscone West. We walked through twelve threat categories, nearly forty individual threats, and a set of controls spanning the full MCP stack — […]

April 20, 2026

Addressing what’s next in securing enterprise AI

Authors: Akila Srinivasan and J.R. Rao. Based on a session presented at RSAC 2026 Conference by Akila Srinivasan (Anthropic) and J.R. Rao (IBM) on behalf of the Coalition for Secure AI (CoSAI). AI workloads are already in production across most enterprises, but security guidance has not caught up. That gap […]

April 17, 2026

Who’s Minding the Agent? A New Framework for AI Identity and Access Control

An invoice-processing agent with broad financial system access gets manipulated through prompt injection, malicious instructions embedded in the data it reads, and begins initiating fraudulent payments, all under a shared service account with no clear audit trail. A customer-support agent with access to CRM, knowledge-base, and email tools starts combining […]