Results for "Access control"
- Article
NIST Just Named Five AI Agent Identity Problems.
When the National Institute of Standards and Technology publishes a warning about enterprise AI agent security, CISOs pay attention. NIST’s NCCoE named five spe…
- Article
AI Agents Don’t Create Security Debt. They Collect It.
Permissions copied from one employee to the next when someone changed roles. Temporary access granted three years ago and never revoked. Files shared “just for …
- Article
Why an LLM Is Not the Core Component of Intent Analysis
Most vendors policing AI agents are using an LLM as the core component of their intent analysis. We think that’s the wrong architectural choice - and here’s the…
- Article
What Ghostjacking Taught Us About the Limits of Identity Governance
Traditional identity governance asks: is this agent allowed to do this? Ghostjacking demonstrates that the right question is: should this agent be doing this, r…
- Article
Meet BYOA: The Shadow AI Agent Problem That Makes BYOD Look Simple
If you were working in enterprise security in the early 2010s, you remember the BYOD moment. We are at that moment again. But this time, the thing employees are…
- Article
NIST Just Proved Rules Aren’t Enough. Intent-Based Identity Is What Comes Next.
Darktrace’s conclusion from the NIST analysis is that AI security must shift from rules to behavior. This is right. But behavioral detection alone has a limitat…
- Article
Your AI Security Vendor Cannot Answer These Questions - And That Is the Problem
Something is shifting in how enterprises evaluate AI agent security vendors. Twelve months ago, the conversations were broad. What do you cover? What does the …
- Article
7 Types of AI Agents Every Security Team Needs to Know (And How to Govern Each One)
Most “types of AI agents” guides are written for the people building them. This one is written for the people who have to answer for what those agents do once t…
- Article
The Problem Has Moved From Prompt Hygiene to Access Architecture
The conversation about AI agent security has been dominated by the wrong question. For the last two years, most of the energy in this space has gone into making…
- Article
Beyond the Token: Why OAuth Solves the Wrong Problem for Enterprise AI Agents
OAuth 2.0 is a well-designed protocol. It solved a real problem elegantly, it scaled across the internet, and the patterns it established are genuinely good eng…
Showing 11 - 20 of 37 results