NIST, CISA and NSA issue AI agent incident guidance as OpenCode reports key exposure
Ten voluntary practices cover prepare, detect, respond, recover and report
The National Institute of Standards and Technology, the Cybersecurity and Infrastructure Security Agency and the National Security Agency have jointly published ten voluntary practices for organisations that train or deploy AI agents, setting out how to handle incidents in which agents act without direction. The 14-page guide, released October 16, comes as open-source coding agent OpenCode disclosed that API keys stored by some users of its Console service were exposed.