CoSAI

October 5, 2026
October 5, 2026

How Much Assurance Does Your AI Supply Chain Need?

Introducing AIMM: The Artifact Integrity Maturity Model for AI/ML Supply Chain Trust and Provenance A team pulls a fine-tuned model from a public hub and puts it into production. It carries no signature, and the pipeline has no verification gate to reject it. Months later, a vulnerability is disclosed in […]
Do you like it?
Read more
September 25, 2026
September 25, 2026

MCP Security, Version 2.0: From Threat Taxonomy to a Model You Can Actually Audit Against

September 2026 After we presented the Model Context Protocol (MCP) Security paper at RSAC 2026, we wrote about the questions we kept getting. Most reduced to identity and authorization, and specifically to delegation: when an agent acts on a user’s behalf across five hops instead of one, what does the […]
Do you like it?
Read more
September 16, 2026
September 16, 2026

Zero Trust for AI Systems: Why Authorization Can’t Live Inside the Model

September 2026 CoSAI’s Preparing Defenders for AI workstream (WS2) has released its latest paper, Zero Trust for AI Systems, a guide for applying one of security’s most established design patterns to the newest category of insider threat: the AI system itself. The timing isn’t abstract. Over the summer, several frontier […]
Do you like it?
Read more
September 1, 2026
September 1, 2026

CoSAI Hosts Working Session on Open Delegation & Identity Standard (ODIS)

As AI agents become more autonomous across enterprise systems, one foundational challenge is emerging: how do we establish who, or what, an AI agent represents, what authority it has been delegated, and whether it can be trusted to take action? Answering that means connecting three things: the principal the agent […]
Do you like it?
Read more
July 20, 2026
July 20, 2026

CoSAI Year 2: The Future of Agentic Security

Launched at the Aspen Security Forum two years ago, the Coalition for Secure AI (CoSAI) set out with a clear purpose: to establish a collaborative, open frameworks for safeguarding AI systems. Since then, the AI landscape has evolved at an unprecedented pace, making the demand for shared best practices and […]
Do you like it?
Read more
May 6, 2026
May 6, 2026

Coalition for Secure AI Unveils New Agentic Identity and Security Research Following High-Profile Sessions at RSAC 2026

Building on the momentum of RSAC, CoSAI’s latest work delivers critical frameworks to help organizations navigate the evolving AI security landscape Boston, MA – 6 May 2026 — Following a high-profile presence at RSAC Conference 2026, the Coalition for Secure AI (CoSAI), a global, multi-stakeholder initiative advancing the security of […]
Do you like it?
Read more
April 17, 2026
April 17, 2026

Who’s Minding the Agent? A New Framework for AI Identity and Access Control

An invoice-processing agent with broad financial system access gets manipulated through prompt injection, malicious instructions embedded in the data it reads, and begins initiating fraudulent payments, all under a shared service account with no clear audit trail. A customer-support agent with access to CRM, knowledge-base, and email tools starts combining […]
Do you like it?
Read more
March 31, 2026
March 31, 2026

When the Bots Run the Incident Response: What AI Agents Mean for Enterprise Security

Our latest paper maps the security challenges of a world where AI doesn’t just answer questions — it acts. Picture this: it’s 2 a.m., an outage hits your production infrastructure, and no human has noticed yet. Within seconds, an autonomous AI agent wakes up, pulls the relevant logs, creates a […]
Do you like it?
Read more