[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f5Kj0r790hn93XqpslaLqceVuBZT7VZFez6w7KYJgwno":3},{"article":4,"iocs":55,"watch_terms":56,"solutions":57,"lesson":93},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":32,"category":33,"article_tags":37},"65f68b9d-d5a2-4717-bd59-f807a5f9cabb","Fortinet Brings AI Agent Security to Oracle Cloud to Block Prompt Injection and Data Leaks","fortinet-brings-ai-agent-security-to-oracle-cloud-to-block-prompt-injection-and-064dd6","Fortinet’s FortiAIGate is bringing AI security controls to enterprise workloads on Oracle Cloud Infrastructure (OCI), helping businesses inspect prompts, block sensitive data leaks, and control agent actions. An Oracle announcement published October 27 outlines how customers can combine the self-hosted gateway with OCI Enterprise AI to protect applications connected to company data and tools. The […] The post Fortinet Brings AI Agent Security to Oracle Cloud to Block Prompt Injection and Data Leaks appeared first on Cyber Security News.","Fortinet has introduced FortiAIGate, an AI security gateway designed to protect enterprise workloads on Oracle Cloud Infrastructure (OCI). This solution aims to inspect prompts, prevent sensitive data leaks, and control AI agent actions, addressing security gaps as AI agents become more integrated with business tools and data. FortiAIGate operates as a reverse proxy, scrutinizing both requests and responses to detect prompt injection, data leaks, and malicious content.","Fortinet's FortiAIGate now secures AI agents on Oracle Cloud Infrastructure.","https:\u002F\u002Fcybersecuritynews.com\u002Ffortinet-brings-ai-agent-security-to-oracle-cloud\u002F","https:\u002F\u002Fcybersecuritynews.com\u002Fwp-content\u002Fuploads\u002F2026\u002F10\u002FFortinet-Brings-AI-Agent-Security-to-Oracle-Cloud-to-Block-Prompt-Injection-and-Data-Leaks.webp","2026-10-29T02:46:10+00:00","2026-10-29T03:00:07.918452+00:00",7,[17,20,23,25,27,30],{"name":18,"type":19},"FortiAIGate","product",{"name":21,"type":22},"Fortinet","vendor",{"name":24,"type":19},"OCI Enterprise AI",{"name":26,"type":22},"Oracle",{"name":28,"type":29},"AI Agents","technology",{"name":31,"type":29},"Prompt Injection","839da5c1-3c34-47e2-9499-f7201640e3ac",{"id":32,"icon":34,"name":35,"slug":36},null,"AI Security","ai-security",[38,43,45,50],{"category":39},{"id":40,"icon":34,"name":41,"slug":42},"02371804-cf6d-4449-98de-f1a2d4d9b266","Tools","tools",{"category":44},{"id":32,"icon":34,"name":35,"slug":36},{"category":46},{"id":47,"icon":34,"name":48,"slug":49},"c70f3a41-2f0c-4608-870d-b8cbcd8be076","Cloud Security","cloud-security",{"category":51},{"id":52,"icon":34,"name":53,"slug":54},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[21,26,18],{"controls":58,"vendors":87},[59],{"slug":36,"name":60,"problem":61,"products":62},"AI application security","Prompt injection, data leaks through AI tools and unapproved AI use get caught.",[63,71,79],{"vendor_slug":64,"vendor_name":65,"vendor_logo":66,"product_slug":67,"product_name":68,"url":69,"description":70},"boomi","Boomi","\u002Fvendor-logos\u002Fboomi.png","boomi-ai-gateway","Boomi AI Gateway","https:\u002F\u002Fboomi.com\u002Fplatform\u002Fai-gateway\u002F","Gateway for AI model and MCP tool traffic, built on Lunar.dev technology. It limits which tools each agent can call. Its enterprise version adds an approval step for new MCP servers and logs each call with the user or agent behind it.",{"vendor_slug":72,"vendor_name":73,"vendor_logo":74,"product_slug":75,"product_name":76,"url":77,"description":78},"cisco","Cisco","\u002Fvendor-logos\u002Fcisco.png","ai-defense","Cisco AI Defense","https:\u002F\u002Fwww.cisco.com\u002Fsite\u002Fus\u002Fen\u002Fproducts\u002Fsecurity\u002Fai-defense\u002Findex.html","Discovery of AI use, testing of models and guardrails for AI applications.",{"vendor_slug":80,"vendor_name":81,"vendor_logo":82,"product_slug":83,"product_name":84,"url":85,"description":86},"hiddenlayer","HiddenLayer","\u002Fvendor-logos\u002Fhiddenlayer.png","hiddenlayer-ai-security","HiddenLayer AI Security Platform","https:\u002F\u002Fhiddenlayer.com\u002F","Model scanning, AI red teaming and runtime protection for AI applications.",[88],{"slug":89,"name":21,"logo_path":90,"roles":91},"fortinet","\u002Fvendor-logos\u002Ffortinet.png",[92],"reported_by",{"slug":94,"title":95,"body":96,"framework_refs":97,"framework_notes":105},"ai-agent-security-gaps-demand-prompt-inspection-and-data-leak-controls","AI Agent Security Gaps Demand Prompt Inspection and Data Leak Controls","As enterprises rapidly integrate AI agents into business workflows, new attack surfaces emerge — particularly prompt injection attacks and unintended sensitive data exposure through AI-generated responses. Without dedicated inspection layers, AI agents can be manipulated into executing unauthorized actions or leaking confidential data to malicious actors. Fortinet's FortiAIGate highlights that traditional perimeter security tools are not designed to scrutinize AI-specific traffic, leaving organizations blind to these novel threats. This matters because AI agents increasingly have privileged access to internal systems, databases, and APIs, making them high-value targets for abuse.",[98,99,100,101,102,103,104],"NIST SP 800-53 SI-2: Flaw Remediation","NIST CSF 2.0 PR.AA: Identity Management, Authentication, and Access Control","CIS Control 3: Data Protection","CIS Control 13: Network Monitoring and Defense","GDPR Article 32","ISO\u002FIEC 27001:2022 A.8.8: Management of technical vulnerabilities","OWASP A06:2021 Vulnerable and Outdated Components",{"GDPR Article 32":106,"CIS Control 3: Data Protection":107,"NIST SP 800-53 SI-2: Flaw Remediation":108,"CIS Control 13: Network Monitoring and Defense":109,"OWASP A06:2021 Vulnerable and Outdated Components":110,"ISO\u002FIEC 27001:2022 A.8.8: Management of technical vulnerabilities":111,"NIST CSF 2.0 PR.AA: Identity Management, Authentication, and Access Control":112},"Organizations processing personal data through AI agents are required to implement appropriate technical measures to prevent unauthorized disclosure; AI prompt responses leaking PII would constitute a breach of this obligation.","Sensitive data flowing through AI agent pipelines must be classified and protected; without controls like those FortiAIGate provides, data leakage through AI responses goes undetected.","AI systems deployed without security inspection layers represent unmitigated flaws; SI-2 requires organizations to identify and correct weaknesses in information systems before adversaries can exploit them.","Inspecting AI agent traffic as a reverse proxy — as FortiAIGate does — is precisely the kind of network-layer monitoring and defense that CIS Control 13 mandates to detect and block malicious content in transit.","AI frameworks and LLM integrations deployed without security hardening or inspection represent vulnerable components in the application stack, directly paralleling the risk OWASP A06 warns against.","Prompt injection is a known and documented vulnerability class in AI systems; ISO 27001 A.8.8 requires organizations to assess and mitigate technical vulnerabilities, including those specific to emerging technologies like AI agents.","AI agents acting with overly broad permissions can leak data or be hijacked; enforcing least-privilege access control directly limits the blast radius of a successful prompt injection attack."]