WitnessOps @WitnessOps
Proof other people can check. Security reviews for AI agents and internet-facing systems. [email protected] witnessops.com Warsaw, Poland Joined September 2025-
Tweets37
-
Followers4
-
Following85
-
Likes28
Source: Swarmchasers full report (14 Oct) swarmcha.se/posts/chinese-…
Swarmchasers (14 Oct): agents on Tencent Cloud made 2,600+ tries at Amap place data. When blocked, some tried API keys left in public code. A source close to Tencent says it was an evaluation, now ended, with no external breach found. Which of your keys could an agent find?
Source: Stripe Services Agreement, General Terms §1.7 (last modified 28 Sep 2026) stripe.com/legal/ssa. For existing users, General Terms changes take effect 6 Jan 2027: support.stripe.com/questions/stri…
Stripe's updated Services Agreement (§1.7): if you use an AI agent to access Stripe, you are "solely responsible for each action initiated by or through the AI Agent," and those actions are "legally binding." For one payment action: what approved it, and where is that written?
Source: CISA alert, 13 Oct cisa.gov/news-events/al…
Today (16 Oct) is CISA's KEV due date for Ivanti Connect Secure CVE-2026-104935. One line in the alert worth keeping: Ivanti's Integrity Checker "may not detect" exploitation, because the commands execute in memory. If you patched: where is the evidence of what ran before?
MAS says SAFR v1.1 (industry reference, not a new rule) puts a checkpoint before an AI agent’s financial action: identity, mandate match, then a record of the decision. Useful test: can someone outside the team see that the approval or deny came first?
@ben_callow A vendor PASS is not a control. The useful artefacts are the ones you named: permission boundary, action log, and a stop path — written so someone outside the team can still check them after the dashboard moves on.
Nadella (10 Oct): every meaningful model action should leave "tamper-proof human readable evidence," and an authorised person must be able to stop a model mid-task. Checkable question: does each consequential agent action leave a record someone else can still read?
@rubengarciaes Agreed. One test worth adding: can someone outside the team rebuild that chain for a single action (which agent, under whose authority, what it could reach) without logging into the vendor dashboard?
@SCMagazine @britive1 Task-scoped, time-bound access also leaves something checkable afterwards: what the agent could reach at the moment it acted, not only what the policy said that week.
@helpnetsecurity @PCISSC Defining which agent actions need approval is the easy half. The half reviewers ask for is a record that each approval came before the action, one someone outside the team can check. Worth noting the PCI guidance is advisory.
Which agent performs the action? Ars Technica reports prompt injections relayed between MCP-connected agents: a lightly guarded helper passes instructions to an agent that trusts it. For any consequential action: which identity executes it, and what approval record reaches it?
Evidence survives the dashboard. A WitnessOps review ends in written findings, the evidence behind each one, and the limits of what was checked. Something a person outside the team can read and check.
@AIsystemsRadar The sandbox answers what it can reach at config time. The harder question after an incident is what it actually did reach, under which identity, and who approved it. Worth recording per action, somewhere the agent can't edit.
@AInDotNet Agreed. And when something does get through, the record matters: which identity ran the action, what it was allowed to do, who approved it. Written so someone outside the team can check it, not just the vendor's dashboard.
𝐕𝐚𝐥𝐞𝐫�... @valeriixai
116 Followers 243 Following Building AI agents. Researching AI safety and security. Covering new models, breakthroughs, vulnerabilities, and what actually works.
Healthy Pockets(priva... @healthy_pocki
52 Followers 598 Following 400,000 + YouTube📺 Save to Invest & have Healthy Pockets!📩 Contact: [email protected]
Mc Leno's Pro @McLenosPro1bkb
725 Followers 7K Following I am Professional Trader My 10 Year's Experience In Forex Trading Join My Forex Free Signal Chaneel 👇
X Money @XMoney
602K Followers 1 Following Your money, on the world’s most powerful network. Rolling out to U.S. residents.
𝐕𝐚𝐥𝐞𝐫�... @valeriixai
116 Followers 243 Following Building AI agents. Researching AI safety and security. Covering new models, breakthroughs, vulnerabilities, and what actually works.
AI Governance Briefin... @AIGovBriefings
44 Followers 119 Following Breaking down how AI policy and regulation shape enterprise decisions. Practical analysis for leaders navigating AI risk, governance, and compliance.
Phillip Shoemaker @pbsIdentity
2K Followers 919 Following CEO | Al Strategy Executive | Keynote Speaker → Focused on protecting people from online threats like Al impersonation, deepfakes, fraud, and scams.
Bobo Lin | AI notes @BoboLinNotes
3K Followers 4K Following AI is full of confident claims. I’m interested in the conditions that make them true. Notes on research, agents, and real-world AI.
Ben Callow💹🧲 @ben_callow
384 Followers 449 Following Founder @keystone_group1 - AI-native automation consultancy for UK SMEs. Building in public.
Kannan Subbiah @kannagoldsun
2K Followers 1K Following Fractional CxO | Cyber Resilience | IT Governance | Data Protection | Independent Director
Dr. Tali Režun @talirezun
2K Followers 1K Following Non-developer shipping production AI software. Open-source: The Curator, ØØT. Vice Dean @COTRUGLI. From Lab to Life — field notes, not vendor marketing.
Farrukh Naveed Anjum @farrukh_codes
612 Followers 2K Following Software Architect | 18 yrs in Backend, AI & Data Systems | I explain Architecture, AI Engineering & real product building with simple visuals.
Rubén García @rubengarciaes
15K Followers 108 Following #SeniorAIEngineer - Cofounder https://t.co/wcIrrzDl36
watchTowr @watchtowrcyber
14K Followers 12 Following watchTowr enables organizations to get ahead of in-the-wild exploitation with Preemptive Exposure Management technology.
Troy Hunt @troyhunt
256K Followers 1K Following Founder & CEO of @haveibeenpwned, the most trusted name in data breach intelligence. Speaker, blogger, Microsoft Regional Director. Gold Coast, Australia.
Bravish @bravish_
66 Followers 486 Following Building https://t.co/s3qY8QJB3D Verification and Safety of Agentic Systems. Prev: Cambridge JBS, Microsoft, IITM
X Ethan @XEthanai
33K Followers 3K Following
Donald J. Trump @realDonaldTrump
111.8M Followers 53 Following 45th & 47th President of the United States of America🇺🇸
MAGA LEAKS 45/47 @MAGALEAKS47
8K Followers 1 Following Stay informed. Question everything. Verify the facts. Follow for the latest updates. 🇺🇸
Frontier @dailyfrontl4
2K Followers 1K Following Patriot who believes in strong borders, strong families, and a strong America. 🇺🇸
👮♂️🚒 Tal... @ScottEnlow
90K Followers 35K Following 27-yr retired firefighter & elected LEO | Writer - true police & fire chronicles | Bodycam + 1A auditor videos | Heroism & accountability - showing good & bad
CopsOnCam @CopsOnCamg59
82K Followers 56 Following 🎥 Real police footage & bodycam moments 🚨 Traffic stops • Arrests • Police encounters 🇺🇸 Watch. Observe. Stay informed.
OQ Comprei @OQComprei
36K Followers 35 Following Nossa, vamos comprar!🫸🫷💥 Os gêmeos dos testes virais Clique em "seguir" para não cair em cilada 👇Links dos produtos👇 https://t.co/UuD55vGZB6
Chris Titus Tech @christitustech
29K Followers 300 Following Creator of WinUtil • GitHub's most popular Windows PowerShell utility | Tech content creator focused on Windows & Linux optimization | https://t.co/MJlDO9ejLc
Chubby♨️ @kimmonismus
152K Followers 3K Following Tech Analyst & Content Creator. Editor-in-Chief @getsuperintel - Community of 300k+ in total: 🔗 https://t.co/jHMmImmI5I //📧 [email protected]
Anthropic @AnthropicAI
1.8M Followers 2 Following We're an AI safety and research company that builds reliable, interpretable, and steerable AI systems. Talk to our AI assistant @claudeai on https://t.co/FhDI3KQh0n.
DAIR.AI @dair_ai
135K Followers 1 Following Democratizing AI research, education, and technologies. Learn about AI Agents for FREE at https://t.co/HHXg8rryu4
Chip Huyen @chipro
155K Followers 738 Following @aisysbooks @goodailist AI Engineering: https://t.co/94dv4uTU1H Designing MLSys: https://t.co/G81hL2dWmr Reading @chipslib
swyx @swyx
204K Followers 4K Following achieve ambition with intentionality, intensity, integrity & insanity. affiliations: - @smol_ai - @dxtipshq - @cognition - @aidotengineer - @latentspacepod
Ethan Mollick @emollick
406K Followers 594 Following Professor @Wharton studying AI. New book, Co-Existence, coming October 20. Preorder here: https://t.co/hsDYf1xU9K Substack: https://t.co/UIBhxu4bgq
Simon Willison @simonw
242K Followers 6K Following Creator @datasetteproj, co-creator Django. PSF board. Hangs out with @natbat. He/Him. Mastodon: https://t.co/t0MrmnJW0K Bsky: https://t.co/OnWIyhX4CH
Andrej Karpathy @karpathy
4.4M Followers 1K Following
XBOW @Xbow
16K Followers 18 Following The autonomous offensive security company redefining cyber defense for the AI era.
Zenity @zenitysec
1K Followers 91 Following Zenity is the first security and governance platform purpose-built for AI agents - spanning SaaS, Cloud, and Endpoint
CyberAgents Exchange @CyberAgentEx
39 Followers 12 Following Open, vendor-neutral exchange to share cybersecurity AI agents, skills, and MCP servers. Built by defenders, for defenders.
NSA Cyber @NSACyber
159K Followers 12 Following We protect our nation’s most sensitive systems against cyber threats. Likes, retweets, and follows ≠ endorsement.
AI Security Engineers @aiseceng
7K Followers 2K Following Advancing AI security by uniting innovators, researchers, builders, and defenders to share insights on securing AI-powered and agentic applications.
Jaynit @jaynitx
60K Followers 139 Following Building aHQ | Helping VCs & founders to build an unforgettable Personal Brand | Writer • Thinker • Self-Improvement
Roobee @Roobee_invest
139K Followers 95 Following Your companion in the world of #DeFi & #RWA! Track & Trade & Invest on https://t.co/OLncIzRw2k
Sjuul | AltCryptoGems @AltCryptoGems
469K Followers 2K Following Invest in the Unexpected || Founder of @AltCryptoCast, @AltCryptoTalk, @KollectAgency, @48HoursAI & @UseWallyAI || DM for Business Enquiries 💰
Blockchainedbb @blockchainedbb
225K Followers 3K Following Full-time Crypto and Stock trader 🇨🇦| I post charts and everything Crypto and Stocks | Click to join the community Support :[email protected]
👑 CHOWH1 @CHOWH1_
215K Followers 925 Following 🥇 Champion WSOW Solo 🔥 Ambassadeur @secretlabchairs / @holysquad_fr / @NordVPN / @ASUS_ROG_FR ✉️ [email protected] ✉️
Healthy Pockets @healthy_pockets
311K Followers 355 Following 400,000 + YouTube 📺 Save to Invest & have Healthy Pockets! 📩 Contact: [email protected]
Türk Kripto Balinala... @TKbalinalari
55K Followers 89 Following Kişisel görüşlerimi ve kripto piyasasında yaptığım yatırımları içermektedir. Türkiye'nin en büyük kripto yatırımcılarından biri olarak tanınıyorum.You might like
