[un]prompted II reports autonomous attackers exploiting agent harnesses

The author argues that securing AI agents requires focusing on the harness around the model—such as access limits, credentials, and sandboxing—rather than relying on the model itself to behave securely. Field reports and tests discussed at the [un]prompted II conference indicate that autonomous attackers are already exploiting weak agent harnesses and vulnerabilities at scale. Open article →