Identity Stops at Login. AI Doesn't.
AI agents do not just change who needs an identity. They change how long we need to keep making trust decisions.
Read field note →Topic archive
cybersecurity
No rogue AI. Just one over-trusted tool.
No rogue AI. Just one over-trusted tool.
Read field note →One compromised update. 150 domain controllers down.
One compromised update. 45,000 PCs. 150 domain controllers down. Ships stranded 10 days. $300M+.
Read field note →They didn't hack MGM's encryption. They called somebody.
They didn't hack MGM's encryption. They called somebody.
Read field note →Hackers had to hack. Now they just log in.
Machine identities now outnumber humans 109 to 1 inside the average enterprise.
Read field note →A Lock Only Keeps an Honest Person Honest
Every era of identity attack tells the same story: unmanaged trust plus poor visibility inside the environment.
Read field note →No hacker required.
The wildest AI story this week needed zero attackers.
Read field note →The agent wasn't broken.
Some of the most important AI incidents are not product bugs.
Read field note →Sometimes AI is too helpful.
Helpful AI without hard limits can become a security problem fast.
Read field note →