[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"branding":3,"analytics":7,"article-ai-agents-are-becoming-kernels-and-security-hasnt-caught-up":10,"sections":35},{"siteName":4,"siteTagline":5,"publisherName":4,"contactEmail":6},"The Revision","Tech news, decoded.","editor@therevision.news",{"gaMeasurementId":8,"adsenseClientId":9},"G-ZW2MV82GYR","ca-pub-8533917693782264",{"article":11},{"id":12,"slug":13,"title":14,"dek":15,"body_md":16,"tags_json":17,"published_at":18,"created_at":19,"updated_at":20,"status":21,"review_note":22,"review_notes":23,"image_url":22,"persona_id":22,"persona_name":22,"section":24,"tags":25,"sources":30,"feedback":34,"feedback_at":22,"cost_usd":34,"total_tokens":34},7508,"ai-agents-are-becoming-kernels-and-security-hasnt-caught-up","AI Agents Are Becoming Kernels, and Security Hasn't Caught Up","A new paper argues AI agents wield kernel-level power without the deterministic mediation operating systems require, leaving real security gaps.","AI agents can now edit your code, read your inbox, and buy things on your behalf - but nobody built the security layer to check their work.\n\nA new arXiv paper systematizes the security problem facing \"AI-native\" operating systems, where large language model agents act as a de-facto kernel with broad, consequential authority. The researchers draw a line between crossings that can be checked deterministically, based on where data came from, and crossings that require judging content itself - telling instructions apart from data, or a legitimate action from a malicious one. That second kind of check, they argue, is where classical security guarantees break down, because no reliable automatic mediator exists for it. The paper catalogs current defenses, including runtime monitoring, architectural separation, and authorization schemes, and argues that many published attack-success numbers overstate how secure real deployments actually are.\n\nThe distinction matters because it separates fixable problems from open ones. Some vulnerabilities are just deployment debt - a known, sound check that nobody turned on. Others are structural gaps with no known fix, meaning some attacks will keep succeeding no matter how carefully a system is configured. For anyone building or buying agent-based tools that touch real accounts and real money, that is the difference between \"patch it\" and \"do not trust it yet.\"\n\nOperating system vendors are already racing to put agents at the center of the OS. This paper is a reminder that a model deciding to act is not the same thing as a model being granted permission to.","[\"ai agents\",\"ai security\",\"operating systems\",\"arxiv research\"]","2026-09-23T04:00:00.000Z","2026-09-23T23:08:30.284Z","2026-09-23T23:08:36.750Z","published",null,[],"security",[26,27,28,29],"ai agents","ai security","operating systems","arxiv research",[31],{"name":32,"url":33},"arXiv cs.AI","https:\u002F\u002Farxiv.org\u002Fabs\u002F2609.23700",0,{"sections":36},[37,42,46,51,56,61,66,71,76,81,86,91,96,101],{"name":38,"slug":39,"count":40,"latest_published_at":41},"AI","ai",4363,"2026-09-23T23:03:26.000Z",{"name":43,"slug":24,"count":44,"latest_published_at":45},"Security",718,"2026-09-23T20:24:22.000Z",{"name":47,"slug":48,"count":49,"latest_published_at":50},"Policy","policy",380,"2026-09-23T22:53:43.000Z",{"name":52,"slug":53,"count":54,"latest_published_at":55},"Deals","deals",220,"2026-09-23T22:00:00.000Z",{"name":57,"slug":58,"count":59,"latest_published_at":60},"Hardware","hardware",172,"2026-09-23T20:44:59.000Z",{"name":62,"slug":63,"count":64,"latest_published_at":65},"Science","science",134,"2026-09-23T09:00:00.000Z",{"name":67,"slug":68,"count":69,"latest_published_at":70},"Consumer Tech","consumer-tech",111,"2026-09-23T17:04:48.000Z",{"name":72,"slug":73,"count":74,"latest_published_at":75},"Software","software",85,"2026-09-23T20:00:00.000Z",{"name":77,"slug":78,"count":79,"latest_published_at":80},"Dev Tools","dev-tools",79,"2026-09-22T22:21:13.000Z",{"name":82,"slug":83,"count":84,"latest_published_at":85},"Startups","startups",66,"2026-09-23T17:28:38.000Z",{"name":87,"slug":88,"count":89,"latest_published_at":90},"Gaming","gaming",45,"2026-09-22T15:35:06.000Z",{"name":92,"slug":93,"count":94,"latest_published_at":95},"General","general",43,"2026-09-21T23:48:56.000Z",{"name":97,"slug":98,"count":99,"latest_published_at":100},"Reviews","reviews",27,"2026-09-22T13:00:00.000Z",{"name":102,"slug":103,"count":104,"latest_published_at":105},"How-To","how-to",6,"2026-06-16T09:00:00.000Z"]