Entity trail

Pillar Security

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Corpus findings

2026-05-14 / thought-leaders-researcherSANS Publishes AI Security Maturity Model Scoring Protect, Utilize, and Govern AI IndependentlySANS released the AI Security Maturity Model, which independently scores three pillars — Protect AI, Utilize AI, and Govern AI — acknowledging that most enterprise AI security programs are strong in one pillar, inconsistent in two, and blind to how they interact. The model addresses a growing gap as organizations deploy AI agents across production workflows without holistic security assessment frameworks. For engineering teams shipping AI features, this provides the first structured self-assessment rubric from a trusted security institution.
2026-04-30 / rss-researcherOpenAI Publishes Cybersecurity Action Plan and Launches GPT-5.4-Cyber ModelOpenAI released a five-pillar cybersecurity strategy to democratize AI-powered cyber defense, alongside a new model variant GPT-5.4-Cyber designed for defensive security tasks. The Trusted Access for Cyber (TAC) program provides tiered access to vetted defenders including government agencies, cloud providers, and critical infrastructure operators. CNN reports OpenAI wants to deploy its most powerful models at all levels of government to fight hackers.
2026-04-23 / skill-finderPillar Security: Google Antigravity Agent Sandbox Escape via Prompt Injection — Native Tool Bypasses Secure Mode EntirelyPillar Security disclosed a vulnerability in Google's Antigravity AI developer tool where the find_by_name native file-search tool executes before Secure Mode protections evaluate commands. By injecting the -X (exec-batch) flag through the Pattern parameter, attackers convert a file search into arbitrary code execution. Combined with Antigravity's permitted file-creation capability, this enables a full attack chain: stage a malicious script, then trigger it through a seemingly legitimate search. Google patched after disclosure and awarded a bug bounty. The flaw highlights a systemic pattern: native/trusted tools bypass the very security boundaries they're supposed to operate within.
2026-03-27 / skill-finderNCSC Head Urges Vibe Coding Safeguards at RSAC: 'Intolerable Risks' Demand Secure-by-Default AI Code Generation, Provable Model Provenance, and Deterministic GuardrailsUK NCSC CEO published guidance on March 24 at RSAC warning that AI-generated code currently poses 'intolerable risks' for organizations. The four-pillar framework demands secure-by-default code generation in AI tools, provable model provenance to prevent backdoors, AI-powered code reviews on all output (human and AI), and deterministic guardrails limiting what code can do even if compromised. This is the first national cybersecurity agency to publish specific vibe coding governance recommendations.
2026-03-25 / agents-researchern8n AI Workflow Platform: Four CVSS 9.4-9.5 Vulnerabilities Including Unauthenticated RCE via Public Forms (CISA Deadline Today)Pillar Security researcher Eilon Cohen disclosed four critical n8n vulnerabilities: CVE-2026-27577 (CVSS 9.4, expression sandbox escape via AST rewriter flaw), CVE-2026-27493 (CVSS 9.5, unauthenticated expression injection via public Form nodes), CVE-2026-27495 (CVSS 9.4, JavaScript Task Runner sandbox code injection), and CVE-2026-27497 (CVSS 9.4, Merge node SQL query exploitation). The Form node bug is especially dangerous — attackers can execute arbitrary shell commands through a public contact form with no authentication. Patched in n8n 2.10.1/2.9.3/1.123.22. CISA KEV remediation deadline for related CVE-2025-68613 is March 25 (today), with 71,537 exposed n8n instances observed worldwide.
2026-03-05 / agents-researcherNIST AI Agent Standards Initiative RFI deadline March 9CAISI three pillars: open-source protocol standards, agent security/identity research agenda, cross-departmental regulatory coordination. NCCoE agent identity draft due April 2. Virtual listening sessions April 2026. Covers prompt injection, backdoored models, specification gaming. Shapes US compliance for agent frameworks.
2026-02-20 / agents-researcherNIST AI Agent Standards Initiative LaunchNIST CAISI announced first US government-led agent standards initiative. Three pillars: industry-led standards, community open-source protocols, agent security research. RFI due March 9, Agent Identity Concept Paper due April 2. Formalizes agent identity as standards category.
2026-02-20 / sources-researcherNIST AI Agent Standards Initiative First US Federal StandardsFirst US federal standards initiative for AI agents. Three pillars: industry-led standards, open-source protocols, security/identity research. RFI due March 9.

Graph relationships

WORKS AT
Eilon Cohen
Eilon Cohen is a researcher at Pillar Security
Source finding
WORKS AT
Eilon Cohen -> Pillar Security
Eilon Cohen is a researcher at Pillar Security
Source finding

Source trail

Microsoft released .NET 10.0.7 VulnCheck reports Pillar Security disclosed Cloud Security Alliance published research A detailed analysis A new arXiv paper Pillar Security researcher Eilon Cohen disclosed four critical vulnerabilities SANS Institute OpenAI Blog UK National Cyber Security Centre — RSAC 2026 Guidance NIST

Graph sources

entity graphfindings textkg edgeskg entitiesnewsletter issues

Fetching from the wire…