120 companies want a rule for telling you when their AI agent broke into something
The Open Secure AI Alliance, a group hosted by the Linux Foundation whose backers include Nvidia, Cisco and CrowdStrike, published a proposed framework on 11 August called SAFE — Shared AI Findings Exchange — for reporting security incidents caused by AI agents. It covers agents gaining unauthorised access to third-party systems, disclosing confidential information, or continuing to probe a live target after the operator suspects something has gone wrong, and it covers near misses as well as actual harm. Members would preserve prompts, agent traces, tool calls, identities, permissions and credentials as evidence; notify affected organisations as soon as possible and demonstrably exposed customers within 72 hours; file a confidential report within four business days and a public one, with an analysis of what failed, within 30 days. It is voluntary, and for now it is only a document: there is no way to submit a report and no implementation timeline, just a GitHub repository collecting feedback.
Related stories
TikTok put a shopping chatbot inside the video you are watching.2026-10-06Wikipedia's owner says OpenAI agents may have caused a May outage.
2026-10-06Norway moves to ban AI glasses from playgrounds and changing rooms.
2026-10-06Under oath, four AI firms would not say if AI could be catastrophic.
2026-10-06Anthropic handed a user's diary entry to the police.
2026-10-05