Mary Beth Minto

October 5, 2026
October 5, 2026

How Much Assurance Does Your AI Supply Chain Need?

Introducing AIMM: The Artifact Integrity Maturity Model for AI/ML Supply Chain Trust and Provenance A team pulls a fine-tuned model from a public hub and puts it into production. It carries no signature, and the pipeline has no verification gate to reject it. Months later, a vulnerability is disclosed in […]
Do you like it?
Read more
September 25, 2026
September 25, 2026

MCP Security, Version 2.0: From Threat Taxonomy to a Model You Can Actually Audit Against

September 2026 After we presented the Model Context Protocol (MCP) Security paper at RSAC 2026, we wrote about the questions we kept getting. Most reduced to identity and authorization, and specifically to delegation: when an agent acts on a user’s behalf across five hops instead of one, what does the […]
Do you like it?
Read more
September 16, 2026
September 16, 2026

Zero Trust for AI Systems: Why Authorization Can’t Live Inside the Model

September 2026 CoSAI’s Preparing Defenders for AI workstream (WS2) has released its latest paper, Zero Trust for AI Systems, a guide for applying one of security’s most established design patterns to the newest category of insider threat: the AI system itself. The timing isn’t abstract. Over the summer, several frontier […]
Do you like it?
Read more
September 1, 2026
September 1, 2026

CoSAI Hosts Working Session on Open Delegation & Identity Standard (ODIS)

As AI agents become more autonomous across enterprise systems, one foundational challenge is emerging: how do we establish who, or what, an AI agent represents, what authority it has been delegated, and whether it can be trusted to take action? Answering that means connecting three things: the principal the agent […]
Do you like it?
Read more
August 25, 2026
August 25, 2026

Treat Your Agent Like an Insider Threat: Why AI Sandboxing Can’t Wait

In a footnote in Anthropic’s April 2026 Mythos Preview system card, a researcher learned that the model he was evaluating had broken out of its container — not from a terminal alert, but from an unexpected email, received while eating a sandwich in a park. A simulated user had asked […]
Do you like it?
Read more
July 20, 2026
July 20, 2026

CoSAI Year 2: The Future of Agentic Security

Launched at the Aspen Security Forum two years ago, the Coalition for Secure AI (CoSAI) set out with a clear purpose: to establish a collaborative, open frameworks for safeguarding AI systems. Since then, the AI landscape has evolved at an unprecedented pace, making the demand for shared best practices and […]
Do you like it?
Read more
May 28, 2026
May 28, 2026

Who’s Responsible When AI Goes Wrong? A New Framework Aims to Answer That Question

When an AI system causes harm or fails a compliance audit, the finger-pointing starts almost immediately. The model provider blames the configuration. The cloud provider points to the tenant. The application team cites model limitations. Our new AI Shared Responsibility Framework is designed to end that cycle before it starts. […]
Do you like it?
Read more
May 6, 2026
May 6, 2026

Coalition for Secure AI Unveils New Agentic Identity and Security Research Following High-Profile Sessions at RSAC 2026

Building on the momentum of RSAC, CoSAI’s latest work delivers critical frameworks to help organizations navigate the evolving AI security landscape Boston, MA – 6 May 2026 — Following a high-profile presence at RSAC Conference 2026, the Coalition for Secure AI (CoSAI), a global, multi-stakeholder initiative advancing the security of […]
Do you like it?
Read more
April 29, 2026
April 29, 2026

After RSAC™ 2026: The MCP Security Question Everyone Kept Asking

April 2026 Last week at RSAC Conference 2026, Jason Clinton and I presented “Securing MCP: Mitigating New Threats in Agentic AI Deployments” to a packed room in Moscone West. We walked through twelve threat categories, nearly forty individual threats, and a set of controls spanning the full MCP stack — […]
Do you like it?
Read more