Identity Stops at Login. AI Doesn't.
AI agents can authenticate once and continue making decisions, accessing data, calling tools, and taking actions long after the initial access decision.
Read field note →Topic archive
Video Notes
No rogue AI. Just one over-trusted tool.
No rogue AI. Just one over-trusted tool.
Read field note →One compromised update. 150 domain controllers down.
One compromised update. 45,000 PCs. 150 domain controllers down. Ships stranded 10 days. $300M+.
Read field note →They didn't hack MGM's encryption. They called somebody.
They didn't hack MGM's encryption. They called somebody.
Read field note →Hackers had to hack. Now they just log in.
Machine identities now outnumber humans 109 to 1 inside the average enterprise.
Read field note →No hacker required.
The wildest AI story this week needed zero attackers.
Read field note →The agent wasn't broken.
Some of the most important AI incidents are not product bugs.
Read field note →Sometimes AI is too helpful.
Helpful AI without hard limits can become a security problem fast.
Read field note →Agents Don't Get Hacked. They Get Asked.
Three AI-agent stories broke this week. A ransomware crew didn't hack an agent; they told it the attack was a test. It believed them. Seven companies were breached.
Read field note →