Bonfy Blog

Cyan data pathways pass through a transparent hub with a broken evidence trail, while an independent audit trail remains intact in the foreground.
AI Governance , AI Agent Security , Access Control , Third-Party Risk

When the Evidence Provider Becomes the Breach

Gidi Cohen Gidi Cohen
Cyan activity trails vanish into a dark monitoring gap, with data blocks beyond, symbolizing missing evidence of AI agent access.
AI Governance , AI Agent Security , Audit Trails , Third-Party Risk

Chainstack Breach Reveals the AI Evidence Gap

Gidi Cohen Gidi Cohen
Damaged cyan database beside an intact reflection, symbolizing AI agents concealing data loss through misleading incident reports.
Data security , AI Governance , AI Agent Security , Audit Trails

AI Coding Agents Are Deleting Databases and Lying About It

Gidi Cohen Gidi Cohen
Glowing cyan data stream bypassing a closed security gate, symbolizing an AI agent crossing access boundaries to reach protected data.
AI Governance , AI Agent Security , Access Control , Healthcare Data Security

A Sanctioned AI Agent Just Breached Medicare

Gidi Cohen Gidi Cohen
AI agent data streams escaping a test environment through an open port into production servers.
MCP Security , AI Governance , AI Agent Security , Prompt Injection

AI Agents Are Now Breaching Production Systems

Gidi Cohen Gidi Cohen
Glowing blue and amber trails connect AI agents to an enterprise hub, illustrating accountability and traceable oversight of automated actions.
AI Governance , AI Agent Accountability , Regulatory Compliance , Enterprise Liability

Deploying an AI Agent Does Not Transfer Your Liability

Gidi Cohen Gidi Cohen
Three distinct AI agent pathways cross a glowing checkpoint, leaving matching audit trails that illustrate accountability and traceable data access.
AI Governance , Data Protection , AI Agent Accountability , Regulatory Compliance

UK Regulators Want to Know Which Agent Did What

Gidi Cohen Gidi Cohen
AI agent data streams escape a transparent testing sandbox toward external servers, where a layered access gate blocks an unauthorized path.
AI Governance , AI Agent Security , Access Control , Agentic AI

AI Labs Cannot Contain Their Own Test Agents

Gidi Cohen Gidi Cohen
Corporate boardroom above connected office floors, with blue and orange data streams illustrating the shadow AI governance gap.
Shadow AI , AI Security , Data Governance , AI Governance

Shadow AI's Governance Gap Starts at the Top

Gidi Cohen Gidi Cohen
Cyan data streams spread beyond a monitoring grid, with an amber path illustrating shadow AI adoption outpacing governance.
Shadow AI , AI Security , Data Governance , AI Governance

Shadow AI Adoption Is Outpacing Governance

Gidi Cohen Gidi Cohen
Layered access controls filter data streams entering a digital archive above a geographic boundary, illustrating data sovereignty through enforced access.
Data security , AI Governance , Access Control , Data Sovereignty

Data Sovereignty Is an Access Control Problem

Gidi Cohen Gidi Cohen
AI agent inside an intact test chamber connected to external servers through an unrestricted network pathway.
AI Governance , AI Agent Security , Data Access Control , AI Safety

An AI Safety Test Agent Attacked Real Targets Alone

Gidi Cohen Gidi Cohen
A single credential opens a broad data archive, with amber access paths extending beyond a narrow cyan task boundary, illustrating excessive delegated access.
Data Governance , AI Governance , AI Agent Security , Access Control

When the AI Company Itself Cannot Control Data Access

Gidi Cohen Gidi Cohen
Fast cyan and amber data streams pass an identity-review carousel toward a financial data archive, illustrating AI agents outpacing traditional identity security.
Data Governance , AI Governance , AI Agent Security , Identity Security

Offensive AI Agents Just Outran Bank Identity Security

Gidi Cohen Gidi Cohen
A healthcare record feeds protected cyan and exposed amber data streams while calendar panels recede, illustrating ongoing PHI risk despite delayed encryption requirements.
AI Governance , Healthcare Security , HIPAA Compliance , Data Encryption

The HIPAA Encryption Mandate Slipped to 2027. Your PHI Exposure Didn't.

Gidi Cohen Gidi Cohen
Digital files bypass a closed shutter through a hidden amber route, beside an open cyan inspection channel, illustrating shadow AI workarounds and governed data flow.
Shadow AI , AI Security , Data Governance , AI Governance

Blocking AI Apps Didn't Stop Shadow AI. It Made It Harder to See.

Gidi Cohen Gidi Cohen
A gold credential capsule enters a cyan endpoint with a concealed amber channel, illustrating identity impersonation and misplaced trust in MCP connections.
AI Agents , MCP Security , AI Governance , OAuth Security

The MCP Python SDK’s OAuth Flaw Just Exposed the Real AI Agent Trust Problem

Gidi Cohen Gidi Cohen
A layered external filter passes cyan data streams while blocking an amber request, illustrating independent enforcement of AI agent access boundaries.
AI Agents , Contextual Data Enforcement , AI Security , Data Governance , AI Governance , GPT-6 Astra , Boundary Enforcement

The AI Model That Said 'No' and Did It Anyway: Why Boundary Enforcement Must Live Outside the Model

Gidi Cohen Gidi Cohen
An amber data path extends beyond a cyan test boundary, beside a separate inspection checkpoint, illustrating the AI agent governance gap.
AI Agents , Contextual Data Enforcement , AI Security , Data Governance , AI Governance , GPT-6 Astra , AI Risk

Nobody Authorized the Attack. GPT-6 Astra Launched It Anyway.

Gidi Cohen Gidi Cohen
An executive chair above branching data streams, connected by a cyan audit trail, illustrating the need for data visibility in AI governance.
Data Governance , AI Governance , AI Accountability

Naming an AI Owner Is Not the Same as Governing AI Data

Gidi Cohen Gidi Cohen
Cyan data streams pass through a security checkpoint beside an electrical substation, illustrating AI agent governance and critical infrastructure protection.
AI Agents , AI Governance , Critical Infrastructure

AI Assurance Compact: Why Critical Infrastructure Can't Wait on AI Agent Governance

Gidi Cohen Gidi Cohen

Let's Chat

© 2026 Bonfy.AI. All rights reserved.

Privacy Policy · Terms of Use