Black-and-white meme of Link from The Legend of Zelda sitting in a white armchair with both hands raised, captioned ABSOLUTE HYAH.

Last week in Agent Security Update 6: The Legend of Vibe-Hacking

For the past week, I’ve been enviously watching YouTube video walkthroughs of Legend of Zelda: Ocarina of Time remakes that was released last week. My first video game console was a Nintendo 64 with Goldeneye bundled with it. My parents gave me that along with the original Legend of Zelda Ocarina of Time. You can’t ask for a better introduction to gaming than that! I’ve got an Xbox One which is handy because I get Game Pass Ultimate through work, so most of the games I play are free. However I’d be lying if I said I didn’t want to go and buy a Nintendo Switch 2 just so I can go down memory lane again. ...

November 9, 2026 · 14 min · Will Velida
Spider-Man pointing meme with Cursor and Anthropic pointing at each other.

Last week in Agent Security Update 5: The Pentagon Prompts

Last week I spoke at API Days in Melbourne, where I gave a talk on the OWASP Top 10 for Agents and how you can mitigate the risks using tools such as the Agent Governance Toolkit and Microsoft Entra Agent ID. My talk was scheduled to be in the last timeslot of the day, which was 4.50pm. That’s a tough spot for speakers and audiences, as conferences can be a long and tiring day. I was fully prepared to speak to about 2 people in the room who decided not to beat the traffic and get their money’s worth. ...

November 2, 2026 · 14 min · Will Velida
Last week in Agent Security Update 4: Cairn’t Touch This

Last week in Agent Security Update 4: Cairn’t Touch This

What a fucking week…. If you’ve been living under a rock this week, two critical RCE vulnerabilities were found in PHP, collectively known as PHP2Shell. This vulnerability allows unauthenticated attackers to remotely execute code on vulnerable web servers without logging in or providing credentials, potentially seizing server control or stealing data. These vulnerabilities affected all PHP versions released over the last decade, spanning back to version 5.4. This was particularly scary because according to Wiz, PHP powers 70% of the world’s websites, including banking and government applications. ...

October 26, 2026 · 13 min · Will Velida
Last week in Agent Security Update 3: That's not Aoki!

Last week in Agent Security Update 3: That's not Aoki!

An apology to start off with! I was too busy having fun in Sydney last week hacking with customers, building agents and agent harnesses to provide last weeks update. I got to experiment with Entra Agent ID and Agent Governance Toolkit, two technologies I’m looking forward to building with more over the next few months. I’ve bought myself a set of Wireless Pro from Rode which I need to test out, so maybe I might give this update on my YouTube channel as well as this blog in the future. ...

October 19, 2026 · 8 min · Will Velida
Last week in Agent Security Update 2: Zam-mad Max

Last week in Agent Security Update 2: Zam-mad Max

Last week I’ve been struggling with some kind of illness. My throat was dry and I couldn’t breathe on Friday, so I took a course of pseudoephedrine medication, bought some strepsils, and a nasal spray just to manage it. I was sick the whole weekend and started to recover just in time for Monday! Being an adult is awesome…. Now those of you who are a little too keen for our robot overlords to consume us might point out that agents don’t get sick, but they can be subject to a wide variety of vulnerabilities. Not the greatest segway into this weeks article, but I couldn’t think of anything else. ...

October 5, 2026 · 13 min · Will Velida