[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fXtxUk1ZdPLvL3WfrmMiYj9lZH63YsF55eAdt9EXgNwY":3},{"article":4,"iocs":50,"watch_terms":51,"solutions":52,"lesson":83},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":27,"category":28,"article_tags":32},"7d949664-565a-4f32-bf28-03eccd0c61cd","New CUSTODY Framework Constrains AI Agents Inside the Network","new-custody-framework-constrains-ai-agents-inside-the-network-0c1b8a","Enterprise cybersecurity expert Jake Williams joins the Dark Reading News Desk to explain why he decided to release his new agentic AI framework in the wake of the OpenAI attacks on Hugging Face.","Jake Williams has released a new agentic AI framework called CUSTODY, designed to address security concerns arising from the increasing use of AI agents within enterprise networks. The framework was developed in response to recent attacks, such as those targeting Hugging Face, which highlighted the potential risks associated with these powerful AI tools.","New CUSTODY framework aims to constrain agentic AI within enterprise networks.","https:\u002F\u002Fwww.darkreading.com\u002Fperimeter\u002Fnew-custody-framework-constrains-ai-agents-inside-network","https:\u002F\u002Feu-images.contentstack.com\u002Fv3\u002Fassets\u002Fblt6d90778a997de1cd\u002Fblt5bccc03f4b27984e\u002F6a8754a988809d97a89eb2b5\u002FJake_Williams_News_Desk_2026.jpg?width=720&quality=80&disable=upscale","2026-08-20T20:42:18+00:00","2026-08-20T22:00:09.77263+00:00",7,[17,20,23,25],{"name":18,"type":19},"CUSTODY","product",{"name":21,"type":22},"OpenAI","vendor",{"name":24,"type":19},"Hugging Face",{"name":26,"type":19},"AI agents","839da5c1-3c34-47e2-9499-f7201640e3ac",{"id":27,"icon":29,"name":30,"slug":31},null,"AI Security","ai-security",[33,38,40,45],{"category":34},{"id":35,"icon":29,"name":36,"slug":37},"02371804-cf6d-4449-98de-f1a2d4d9b266","Tools","tools",{"category":39},{"id":27,"icon":29,"name":30,"slug":31},{"category":41},{"id":42,"icon":29,"name":43,"slug":44},"c5c77cdb-f7d7-4990-9436-c81dcbff1163","Policy","policy",{"category":46},{"id":47,"icon":29,"name":48,"slug":49},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[21,18,24],{"controls":53,"vendors":82},[54],{"slug":31,"name":55,"problem":56,"products":57},"AI application security","Prompt injection, data leaks through AI tools and unapproved AI use get caught.",[58,66,74],{"vendor_slug":59,"vendor_name":60,"vendor_logo":61,"product_slug":62,"product_name":63,"url":64,"description":65},"boomi","Boomi","\u002Fvendor-logos\u002Fboomi.png","boomi-agentstudio","Boomi Agentstudio","https:\u002F\u002Fboomi.com\u002Fplatform\u002Fagentstudio\u002F","Agent builder whose Agent Control Tower registers and monitors Boomi agents and agents on Amazon Bedrock, Microsoft Copilot and other platforms, keeps audit logs and can switch agents off where the provider allows it.",{"vendor_slug":67,"vendor_name":68,"vendor_logo":69,"product_slug":70,"product_name":71,"url":72,"description":73},"cisco","Cisco","\u002Fvendor-logos\u002Fcisco.png","ai-defense","Cisco AI Defense","https:\u002F\u002Fwww.cisco.com\u002Fsite\u002Fus\u002Fen\u002Fproducts\u002Fsecurity\u002Fai-defense\u002Findex.html","Discovery of AI use, testing of models and guardrails for AI applications.",{"vendor_slug":75,"vendor_name":76,"vendor_logo":77,"product_slug":78,"product_name":79,"url":80,"description":81},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","prisma-airs","Prisma AIRS","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fai-security\u002Fprisma-airs","Security for AI applications, models and agents, including runtime protection against prompt injection.",[],{"slug":84,"title":85,"body":86,"framework_refs":87,"framework_notes":102},"custody-framework-aims-to-rein-in-ai-agents-on-enterprise-networks","CUSTODY Framework Aims to Rein In AI Agents on Enterprise Networks","As AI agents become increasingly embedded in enterprise environments, they introduce novel attack surfaces that traditional security controls were not designed to address. The attacks targeting Hugging Face demonstrated that AI systems with broad network access and autonomous capabilities can be compromised or manipulated to act as powerful internal threats. Without explicit constraints on what AI agents can access, execute, or exfiltrate, organizations effectively grant unchecked privilege to systems that may be vulnerable or adversarially influenced. The CUSTODY framework addresses this gap by applying least-privilege and containment principles specifically tailored to agentic AI behavior. This matters because the blast radius of a compromised AI agent can far exceed that of a compromised human account due to its speed, scale, and automation.",[88,89,90,91,92,93,94,95,96,97,98,99,100,101],"CIS Control 3: Data Protection","CIS Control 4: Secure Configuration of Enterprise Assets","CIS Control 6: Access Control Management","CIS Control 12: Network Infrastructure Management","CIS Control 13: Network Monitoring and Defense","NIST AC-2: Account Management","NIST AC-6: Least Privilege","NIST SC-7: Boundary Protection","NIST SI-3: Malicious Code Protection","NIST AI RMF: GOVERN 1.1 – Policies for AI Risk Management","NIST AI RMF: MAP 1.5 – AI System Boundaries and Context","ISO\u002FIEC 42001: AI Management System Standard","MITRE ATLAS: Tactic – ML Model Access","GDPR Article 25: Data Protection by Design and by Default",{}]