# 17,600 Actions: Agent Security Is a Systems Problem

DevFeed: [17,600 Actions: Agent Security Is a Systems Problem](<https://devfeed.tech/articles/17-600-actions-agent-security-is-a-systems-problem-4584.md>)

Original publisher: [Read original article](<https://www.docker.com/blog/ai-agent-security-systems-problem/>)

Author: Jin Kim

Published: 2026-08-18T16:00:00Z

Content type: opinion

Language: en

Sources: [Docker](<https://devfeed.tech/sources/docker.md>)

Topics: [AI Agent](<https://devfeed.tech/topics/ai-agent.md>), [Security](<https://devfeed.tech/topics/security.md>), [incident](<https://devfeed.tech/topics/incident.md>), [Securing AI](<https://devfeed.tech/topics/securing-ai.md>), [Incident response](<https://devfeed.tech/topics/incident-response.md>), [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>), [Benchmark](<https://devfeed.tech/topics/benchmark.md>), [benchmarking](<https://devfeed.tech/topics/benchmarking.md>)

Tags: [agent](<https://devfeed.tech/tags/agent.md>), [agents](<https://devfeed.tech/tags/agents.md>), [ai](<https://devfeed.tech/tags/ai.md>), [ai-agent](<https://devfeed.tech/tags/ai-agent.md>), [ai-ml](<https://devfeed.tech/tags/ai-ml.md>), [benchmark](<https://devfeed.tech/tags/benchmark.md>), [community](<https://devfeed.tech/tags/community.md>), [company](<https://devfeed.tech/tags/company.md>), [dhi](<https://devfeed.tech/tags/dhi.md>), [docker](<https://devfeed.tech/tags/docker.md>), [docker-ai-governance](<https://devfeed.tech/tags/docker-ai-governance.md>), [docker-hardened-images](<https://devfeed.tech/tags/docker-hardened-images.md>), [engineering](<https://devfeed.tech/tags/engineering.md>), [evaluation](<https://devfeed.tech/tags/evaluation.md>), [hugging-face](<https://devfeed.tech/tags/hugging-face.md>), [incident](<https://devfeed.tech/tags/incident.md>), [infrastructure](<https://devfeed.tech/tags/infrastructure.md>), [model](<https://devfeed.tech/tags/model.md>), [network](<https://devfeed.tech/tags/network.md>), [openai](<https://devfeed.tech/tags/openai.md>), [opinion](<https://devfeed.tech/tags/opinion.md>), [persistence](<https://devfeed.tech/tags/persistence.md>), [sandboxes](<https://devfeed.tech/tags/sandboxes.md>), [security](<https://devfeed.tech/tags/security.md>), [solutions](<https://devfeed.tech/tags/solutions.md>), [systems](<https://devfeed.tech/tags/systems.md>), [vulnerabilities](<https://devfeed.tech/tags/vulnerabilities.md>)

## AI overview

The article argues that AI-agent security is a systems problem, using the OpenAI/Hugging Face incident and its approximately 17,600 attacker actions to show why human approval and ordinary alert triage cannot control persistent, high-rate workloads. It emphasizes constraining authority, credentials, network access, state, and execution across environments.

## Source excerpt

The OpenAI/Hugging Face incident exposed a new challenge for AI agent security. 17,600 attacker actions show why AI agent security can't rely on human review. Explore the controls needed to constrain, observe, and govern agents at speed.