Identity and Access Management

AI agent authorization risks remain a gap in new NIST-CISA token security guidance

Stronger monitoring, shorter-lived tokens, and tighter controls over how tokens are used after authentication are needed as AI agents complicate who and what enterprises can trust inside their systems.

Exaforce extends its AI security tool to monitor more than just Claude

The new offering correlates AI-agent activity with endpoint, identity, cloud, SaaS and code data to help security teams detect and respond to threats.

AI workflows may be creating a dangerous new authorization blind spot

Researchers warn that trusted AI agents can act as proxies for privileged accounts when user permissions are not enforced downstream.

Securing AI agents: Key controls and best practices

Unchecked AI agents might be your worst insider threats. Security practitioners offer real-world insights on how security teams can reduce the risk and impact of rogue agent activity.

Connectivity and Cloud: A Chance for Zero Trust

Zero trust has a big AI agent problem ahead

Zero trust assumes everyone is an attacker until proven otherwise. But when your enterprise is swarming with unknown autonomous agents, that is tricky if not impossible.

Exploited JFrog Artifactory bug puts software supply chain on alert

The bug is already being exploited in the wild, allowing attackers to generate admin tokens and gain access to Artifactory, the platform that powers many organization’s software supply chains.