The Race Is on to Keep AI Agents From Running Wild With Your Credit Cards (www.wired.com)

The FIDO Alliance, in collaboration with Google and Mastercard, has announced the formation of two working groups aimed at developing industry standards to secure transactions initiated by AI agents. This initiative is crucial as the proliferation of agentic AI creates new risks, including the potential for unauthorized actions by these agents on behalf of users. The proposed standards will include enhanced authentication mechanisms resistant to phishing and rogue instructions, as well as cryptographic tools designed to verify that agents are acting on legitimate user commands. The urgency of this project arises from the rapid advancements in agentic AI, which necessitate swift development of protective measures to promote trust in AI-powered tools. Google’s Agent Payments Protocol (AP2) and Mastercard's Verifiable Intent framework will lay the groundwork for these standards, enabling users to authenticate agent actions while maintaining privacy through selective disclosure. The FIDO Alliance's efforts seek to establish foundational security principles that adapt to the evolving landscape of AI interactions, aiming to safeguard users and enhance confidence in this emerging domain of commerce.