LIVE FEED
Check Point Launches Dangerous Deviation Detection for AI Agents

Check Point Launches Dangerous Deviation Detection for AI Agents

FIRST LOOK ATLAS OWASP MEDIUM Moderate risk · Monitor closely ▲ 7.2 SANS Internet Storm Center

Check Point has introduced a Dangerous Deviation Detection capability that intercepts AI agent tool calls before execution, evaluating whether proposed actions align with the original task intent and flagging operations involving data leakage, privilege escalation, or resource destruction. This closes a meaningful gap for defenders by providing a structured enforcement layer between an agent's decision and its real-world action, addressing both prompt-injection-driven misbehaviour and organic task scope creep. Residual maturity questions remain around integration breadth, model-version drift management, and the operational discipline required to build genuinely least-privilege agent architectures at scale.

Google Gemini API Adds Hooks, Budget Controls, and 3.6 Flash Agents

Google Gemini API Adds Hooks, Budget Controls, and 3.6 Flash Agents

FIRST LOOK ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 7.2 Google DeepMind Blog

Google has updated its Managed Agents in the Gemini API with Gemini 3.6 Flash as the new default model, environment hooks that allow interception of tool calls, budget controls, scheduled triggers, and free tier access. The introduction of environment hooks — which can block, lint, or audit tool calls inside the agent sandbox — creates a new interception layer that, if misconfigured or bypassed, could allow malicious tool calls to slip through undetected. Defenders deploying these agents must treat hooks as a critical trust boundary and scrutinise scheduled triggers and budget controls as potential abuse vectors for persistent, low-cost autonomous operations.

◉ AI THREAT BRIEFING

Stay ahead of the threat.

Twice-weekly digest of critical AI security developments — every story mapped to MITRE ATLAS and OWASP LLM Top 10. Free.

No spam. Unsubscribe anytime.