Sources
All accessed 2026-08-19. [vendor] marks vendor-published claims about the publisher's own market.
OWASP Top 10 for Agentic Applications (Dec 9 2025); OWASP threats/mitigations (Feb 2025) and securing guide 1.0 (Jul 2025); MITRE ATLAS agent techniques (Oct 2025, with Zenity); Microsoft failure-mode taxonomy v2.0 (Jun 4 2026); CISA + five partners, Careful Adoption of Agentic AI Services (May 1 2026, verified against https://content.govdelivery.com/accounts/USDHSCISA/bulletins/41544ff and https://www.cyber.gov.au/business-government/secure-design/artificial-intelligence/careful-adoption-of-agentic-ai-services); NIST NCCoE agent identity concept paper (Feb 5 2026); NIST SP 800-207; Entra ID Protection docs [vendor]; Visa Trusted Agent Protocol (Oct 2025) [vendor]; Mastercard Agent Pay (Apr 29 2025) [vendor]; Google AP2 (Sep 16 2025) [vendor]; AP2 red-team (arXiv 2601.22569, Jan 2026); PSD3/SCA analyses (Norton Rose, BRC, 2026); IEC 61511 AI exclusion (via Kenexis); ISO/IEC TR 5469:2024; FINRA 24-09 (Jun 27 2024) and FINRA 25-07 (Apr 14 2025, request for comment, not a final interpretation), plus the 2026 oversight report; ESMA statement (May 2024); Deloitte Australia refund (Fortune, Oct 2025); Bhattarai & Vu deterministic boundaries (arXiv 2602.09947, Feb 2026); guardrail bypass (arXiv 2504.11168, ACL LLMSEC 2025; arXiv 2502.15427; arXiv 2605.06669; arXiv 2410.02916); FIDES (arXiv 2505.23643; Agent Framework release) [vendor]; Bedrock Automated Reasoning GA (Aug 6 2025) [vendor]; policy-engine guides (Oso 2025, Natoma 2026 [vendor]); EchoLeak (Dark Reading, Jun 2025); Lattice reversal (Fortune, Jul 2024); Agent 365 licensing (SAMexpert 2026; Microsoft GA post May 1 2026 [vendor]; ~40M agents: FY26 Q4 earnings self-report); CSA/Oasis NHI survey (Jan 2026 [sponsored]); Entro NHI stats [vendor]; acquisitions: CSO Online, SecurityWeek, Infosecurity, Cremit RSAC 2026; Gartner guardian agents (Jun 11 2025) + Market Guide (Feb 2026, via reprints); Microsoft least-privilege for agents (Jul 16 2026) [vendor]; OAuth RAR RFC 9396 guides. Re-verify by Q4 2026: consolidation state; Agent 365 registration figures; SIEM baselining gap; guardrail benchmark updates.
Source: research/R10-security-and-identity/sources.md in the evidence repository behind this site.