Topic
Security model that gives no implicit trust to any network location, device or credential and checks every access request against policy, using least privilege.
Retired Lt. Gen. Mary O'Brien told CISOs that AI-made external information reaching executives is now a larger threat than exfiltration. Her examples include the Cracker Barrel backlash, where she did not claim fake accounts caused the stock decline.
Reality
The federal cyber agency now recommends planting fake records, credentials and files across critical infrastructure networks, and its pitch to understaffed teams is that an alert on a decoy needs no analyst to interpret it.
Perspective Coverage
5 publishersReality
Microsoft's Purview and Entra Global Secure Access can now block sensitive uploads to unsanctioned AI tools at the network layer, for users and agents. Licensing is not in the announcement, so tenants cannot yet tell whether it is a setting or a purchase.
Reality
Martin Kuppinger of KuppingerCole argues role-based access cannot hold an agent that makes probabilistic, multi-step decisions, and wants per-session credentials plus logs recording what the agent was told to do.
Reality
Ping Identity executives split enterprise AI agents into four classes at their Austin conference. The two that live on endpoints have no identity of their own, so their actions authenticate as the employee who lent them the credential.
Reality