[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"branding":3,"analytics":7,"article-ai-agents-dont-go-rogue-security-habits-do":10,"sections":43},{"siteName":4,"siteTagline":5,"publisherName":4,"contactEmail":6},"The Revision","Tech news, decoded.","editor@therevision.news",{"gaMeasurementId":8,"adsenseClientId":9},"G-ZW2MV82GYR","ca-pub-8533917693782264",{"article":11},{"id":12,"slug":13,"title":14,"dek":15,"body_md":16,"tags_json":17,"published_at":18,"created_at":19,"updated_at":20,"status":21,"review_note":22,"review_notes":23,"image_url":22,"persona_id":22,"persona_name":22,"section":34,"tags":35,"sources":38,"feedback":42,"feedback_at":22,"cost_usd":42,"total_tokens":42},11638,"ai-agents-dont-go-rogue-security-habits-do","AI Agents Don't Go Rogue, Security Habits Do","A widely discussed piece argues erratic AI agent behavior traces back to frontier labs skipping basic security practices, not agents acting on their own.","AI agents aren't misbehaving on their own. They're running on infrastructure that skipped the basics.\n\nThat's the core argument of a piece making the rounds this week, which pushes back on the popular framing of AI agents \"going rogue.\" The piece contends that when an agent does something unexpected or harmful, the more mundane explanation is usually missing guardrails: weak permissioning, insufficient sandboxing, or access controls that a security team would flag in any other piece of software. In other words, the problem isn't an agent developing a mind of its own. It's engineering teams shipping agents before locking down the systems those agents can touch.\n\nThis matters because \"rogue AI\" headlines are more exciting than \"we forgot to scope an API key,\" and that gap in framing has real consequences. If boards and regulators think the risk is an unpredictable black box, they'll ask for alignment research. If the risk is actually unpatched access controls, they need the same security basics that have applied to every networked system since before \"AI agent\" was a phrase. Conflating the two points incident response and investment in the wrong direction.\n\nThe discussion drew serious attention on Hacker News, pulling in over 500 points and more than 200 comments, suggesting plenty of people in security and engineering circles recognize the pattern from their own shops. None of this is new in spirit: it's the same story as early cloud deployments or the first wave of IoT devices, where speed to ship outpaced basic hardening. Agentic AI just gives that old problem a scarier-sounding name.","[\"ai-agents\",\"security\",\"ai-safety\"]","2026-10-14T17:45:23.000Z","2026-10-14T20:02:56.123Z","2026-10-14T20:03:01.115Z","published",null,[24,30],{"id":25,"reviewer":26,"round":27,"reason":28,"status":29},"editor-r1","editor",1,"Replace the vague 'a new report' attribution with the actual source — this is a CSO Online article (csoonline.com), not an independent report, so name the publication (and author, if available) rather than leaving a dangling, unnamed-source attribution throughout the piece.","resolved",{"id":31,"reviewer":26,"round":32,"reason":33,"status":29},"editor-r2",2,"Drop the invented 'October 14' publication date and 'CSO Online's security desk' attribution — the source material (an HN link listing only the URL, points, and comment count) gives no publish date or author\u002Fdesk, so both read as fabricated specifics that need to be removed or replaced with only what's verifiable.","security",[36,34,37],"ai-agents","ai-safety",[39],{"name":40,"url":41},"Hacker News","https:\u002F\u002Fwww.csoonline.com\u002Farticle\u002F4234854\u002Fai-agents-arent-going-rogue-frontier-labs-are-skipping-security-basics.html",0,{"sections":44},[45,50,54,59,64,69,74,79,84,89,94,99,104,109],{"name":46,"slug":47,"count":48,"latest_published_at":49},"AI","ai",7011,"2026-10-14T20:24:50.000Z",{"name":51,"slug":34,"count":52,"latest_published_at":53},"Security",993,"2026-10-14T20:03:43.000Z",{"name":55,"slug":56,"count":57,"latest_published_at":58},"Policy","policy",523,"2026-10-14T22:03:31.000Z",{"name":60,"slug":61,"count":62,"latest_published_at":63},"Deals","deals",513,"2026-10-14T17:24:42.000Z",{"name":65,"slug":66,"count":67,"latest_published_at":68},"Hardware","hardware",256,"2026-10-14T16:03:09.000Z",{"name":70,"slug":71,"count":72,"latest_published_at":73},"Consumer Tech","consumer-tech",226,"2026-10-14T22:00:02.000Z",{"name":75,"slug":76,"count":77,"latest_published_at":78},"Science","science",201,"2026-10-13T23:13:31.000Z",{"name":80,"slug":81,"count":82,"latest_published_at":83},"Startups","startups",133,"2026-10-14T19:51:34.000Z",{"name":85,"slug":86,"count":87,"latest_published_at":88},"Software","software",125,"2026-10-14T22:23:48.000Z",{"name":90,"slug":91,"count":92,"latest_published_at":93},"Dev Tools","dev-tools",116,"2026-10-13T16:20:18.000Z",{"name":95,"slug":96,"count":97,"latest_published_at":98},"General","general",79,"2026-10-14T18:09:38.000Z",{"name":100,"slug":101,"count":102,"latest_published_at":103},"Gaming","gaming",74,"2026-10-14T19:40:59.000Z",{"name":105,"slug":106,"count":107,"latest_published_at":108},"Reviews","reviews",37,"2026-10-14T10:00:00.000Z",{"name":110,"slug":111,"count":112,"latest_published_at":113},"How-To","how-to",8,"2026-10-05T09:00:00.000Z"]