Appsec

If your team is running AI agents in production — or planning to — the security conversation can no longer be deferred. The OWASP Agentic AI Top 10 and Bright Security’s companion MCP AppSec playbook, both published this week, give security and engineering teams the most complete picture yet of what can go wrong when you hand autonomous agents real credentials and real access. This isn’t theoretical. These are attack patterns being actively exploited in early production deployments right now. ...

OpenAI is entering the enterprise security market in a serious way. On March 6, 2026, the company launched Codex Security — an AI security agent in research preview that doesn’t just find vulnerabilities, but confirms them with proof-of-concept exploits and proposes developer-ready patches. The agent was previously codenamed “Aardvark.” The new name signals intent: this is Codex — OpenAI’s flagship agentic coding system — applied specifically to the application security workflow. ...