noticias ia para empresas ciberseguridad agentes de ia

The connectors that let an AI assistant run your tools are now a way in: a German web host for agencies says an intruder got in through its own and stayed undetected for eight days. Money is following that risk: Vanta, the compliance platform, is buying a company that attacks AI agents on purpose and stops them when they step out of line, for about $150 million. And Meta, which until now sold you ads, is building a sales team to sell you its AI. It follows the Monday, November 9 radar.

A German web host was breached through its AI's MCP connector: ask your vendors which doors they've left open

Mittwald, a German hosting provider for web agencies, said in a blog post on Saturday that an attacker compromised 56 customer projects and went undetected for eight days. The way in was a flaw in its MCP server. MCP is the standard connector that lets an AI assistant operate a tool; Mittwald offered one so customers could have their AI manage websites and hosting from its mStudio dashboard. It's still unclear whether the bug was in Mittwald's own code or in the open-source MCP libraries. Managing director Robert Meyer believes the attacker used AI, because only seconds passed between some steps, though the company hasn't offered other evidence. By the company's own timeline, the intruder first probed the flaw in October, in the middle of the rush to patch the PHP bug we covered in the October 22 radar. Mittwald says it has seen no further activity since Friday and promises a detailed report this week. For your business: your hosting provider, your CRM and your accounting software are all rolling out connectors like this, and each one is a new door into your data with your account's permissions. Ask your web agency and your hosting provider today whether an AI connector is switched on for your account and who uses it. If nobody does, have them turn it off. If you do, use a key of your own, limited to one project and set to expire. Plugging AI into your systems is the INTEGRATED rung, and every connector belongs in your inventory like any other password. Source

Vanta pays about $150 million for Pillar, which tests and reins in agents: AI security moves into the compliance tool

Vanta, the platform more than 20,000 companies use to run security and compliance, has signed a deal to buy Pillar Security, an Israeli startup founded in 2023 with just over 20 employees. Calcalist puts the price at about $150 million in cash and stock; the official announcement doesn't give one. Pillar finds the AI agents a company is running, attacks them on purpose to see if they give way, and stops them in real time when they go beyond what they're allowed to do. Vanta will fold it in over the course of 2027 and points to its own 2025 survey: 65% of IT and business leaders say they're adopting agents faster than they understand them, and fewer than half have rules for granting or limiting AI autonomy. CEO Christina Cacioppo puts it this way: "A policy document doesn't get you there." For your business: the category is consolidating, and agent controls will end up inside the tool you already use to pass audits. When a customer or an auditor asks about your AI, a PDF won't cut it. Write down, for each agent, what it can and can't touch, and prove it stops: send it an email with a hidden instruction and see what it does. That's the price of moving up to the UNATTENDED rung: not the policy, the proof. Source

Meta builds a sales team to sell AI to small businesses: before the call, decide which accounts you'll connect

Meta has started putting together a sales team to sell its AI products to small and midsize businesses, and is lining up consulting firms and systems integrators to reach large companies, The Information reported on Monday; Meta hasn't confirmed it. It's the next step for Meta Enterprise Platform, launched on September 28 with its Muse agent, Meta Business Agent, the Muse API and the Muse Code coding tool, with no pricing or customers announced. A day later Meta opened Muse to small businesses: free with usage limits, paid for heavier use, and hooked into Instagram analytics, Facebook pages, ad accounts and tools like Shopify, Stripe, Slack and QuickBooks. For your business: the company that sells you ads now wants to sell you the agent that runs them, with access to your sales and your payments. Before they call, get three things in writing: what data it trains on (in Muse Code, as we reported in October, Meta can train on your prompts and code by default), what it costs once you're past the free tier, and how you disconnect each account. And remember that Meta has just frozen, not scrapped, the terms that let it blame you for what its AI changes in your ads, as we explained in Monday's radar. Trying a free agent keeps you on the ASSISTED rung; what moves you up is deciding what it touches and measuring what it saves. Source

What to watch tomorrow

Whether Mittwald publishes its detailed report and says if the bug was in the open-source MCP libraries, because then other providers would be exposed too. And whether Anthropic files the price range for its IPO, the step that opens its roadshow with investors.