Identity Security

Non-human identity, borrowed authority, and permissions nobody exercised until an agent did.

3 pieces

• You Use 2 Percent of Your Access. Your Agent Will Use All of It.

  The permissions nobody exercises were harmless while only people held them.

  JUN 4, 2026

• A Chatbot's Token Opened 700 Companies.

  Nobody was phished. The attacker used a credential that belonged to an AI integration, and most organizations cannot revoke one.

  MAY 21, 2026

• $670,000 for the Tools You Did Not Buy.

  One in five breaches now involves AI nobody approved. The account is the problem, not the model.

  JAN 29, 2026