What If the AI Behind Your Next Security Incident Wasn't Hacked?
What if the AI behind your next security incident wasn't hacked?
Read field note →Topic archive
enterprise-ai
Identity Stops at Login. AI Doesn't.
AI agents can authenticate once and continue making decisions, accessing data, calling tools, and taking actions long after the initial access decision.
Read field note →Identity Stops at Login. AI Doesn't.
AI agents do not just change who needs an identity. They change how long we need to keep making trust decisions.
Read field note →No rogue AI. Just one over-trusted tool.
No rogue AI. Just one over-trusted tool.
Read field note →One compromised update. 150 domain controllers down.
One compromised update. 45,000 PCs. 150 domain controllers down. Ships stranded 10 days. $300M+.
Read field note →They didn't hack MGM's encryption. They called somebody.
They didn't hack MGM's encryption. They called somebody.
Read field note →Hackers had to hack. Now they just log in.
Machine identities now outnumber humans 109 to 1 inside the average enterprise.
Read field note →A Lock Only Keeps an Honest Person Honest
Every era of identity attack tells the same story: unmanaged trust plus poor visibility inside the environment.
Read field note →No hacker required.
The wildest AI story this week needed zero attackers.
Read field note →