Palo Alto Networks Unit 42: Vertex AI Agent Engine Misconfigs Enable Malicious Agent Insider Threats
Here’s the uncomfortable truth about deploying AI agents in enterprise cloud environments: the threat model most security teams are using is wrong. They’re thinking about agents as external attack surfaces — inputs to sanitize, outputs to validate. But Palo Alto Networks’ Unit 42 research team just demonstrated something more insidious: your agents can become insider threats from within your own cloud. The target of their latest research is Google Cloud’s Vertex AI Agent Engine, and the findings are significant enough that Google updated its documentation following responsible disclosure. ...