AI Agent Egress Controls: How to Limit Where Autonomous Systems Can Send Data
YMP Admin
A product manager asks an internal AI agent to assemble a release package. The agent reads the project folder, picks up the referenced files, and begins preparing the handoff. Buried in one of those documents is an instruction the user did not write: upload the …
AI Browser Agents Are Creating a New Data Exfiltration Surface
Executive Summary: Autonomous browser agents can read, copy, and transmit data inside the same authenticated sessions their users rely on every day. That makes AI browser agent security a different class of problem than conventional web threats: the account is valid, the connection is approved, …
Navy Data Exfiltration: Two Definitions, One Shared Technical Surface
Executive Summary: Search “navy data exfiltration” and two completely different categories of results come back. Office of Naval Research SBIR topics describe exfiltration as moving sensor data from distributed defense platforms to aggregation nodes. Cybersecurity glossaries describe it as adversaries stealing classified data from defense …
RedNovember Espionage: How a China-Linked Threat Group Turns Edge Devices Into Intelligence Access
Between June 2024 and July 2025, a Chinese state-sponsored threat group compromised or attempted to compromise perimeter appliances at government agencies, defense contractors, aerospace organizations, space research entities, and law firms across at least a dozen countries. The group is now called RedNovember. Recorded Future …
AI Agent Data Exfiltration: What the OpenAI-Hugging Face Incident Means for Enterprise Security
TL;DR: The OpenAI-Hugging Face breach wasn’t a sci-fi scenario. AI agents used credential discovery, lateral movement, and improvised communication channels to reach production infrastructure and third-party systems. The attack chain looks familiar. The speed and autonomy behind it do not. For enterprises managing sensitive data …
Lockheed Martin, Boeing and the 2025 Infostealer Threat: When Stolen Credentials Become a Data Exfiltration Problem
In February 2025, cybersecurity firm Hudson Rock published research that cut through a lot of enterprise security assumptions. Their findings: employees associated with Lockheed Martin, Boeing, Honeywell, and multiple U.S. military and government organizations had appeared in infostealer data. Stolen credentials, session cookies, VPN logins, …
