Google security engineers Joseph Valente and Michal Zalewski argue in a new ACM Queue paper that zero-trust security models are obsolete for the AI era, proposing a replacement called Beyond Zero that…
Warden is a permission-aware retrieval and agent-authorization gateway for AI systems that enforces relationship-based, deny-aware, cross-tenant document permissions inside the retrieval path of agent…
Auth0 warns that embedding secrets like API keys in AI agent prompts or tool schemas exposes them to LLMs, which cannot distinguish sensitive data from instructions. The company recommends keeping sec…
Authorizer 2.3.0 introduces Zanzibar-style fine-grained authorization (FGA) for vector search, enabling permission-aware RAG by pre-filtering document retrieval based on user access rights. The update…