AI agents that hold long-lived bearer credentials in their environment, config, or context window create a systemic leak risk because any entity that obtains the credential can reuse it, and agents ma…
The Cloud Native Computing Foundation (CNCF) argues that the future of agentic AI will be built on the mature cloud-native ecosystem, not entirely new infrastructure, drawing on experience building a …
Red Hat Senior Principal Product Security Engineer Garth Mollett discussed AI supply chain security on Software Engineering Radio, detailing how it differs from conventional software supply chains and…
Gartner predicts over 40% of agentic AI projects will be canceled by 2027, with the EU AI Act's human oversight requirements taking effect in 2026. A product leader argues that success depends on infr…
Non-human identities such as CI/CD agents, Kubernetes workloads, and AI agents are increasingly calling APIs across cloud environments, requiring both machine-to-machine (M2M) authentication and API s…
Kubernetes network policies based on IP addresses become insecure when pods are rescheduled, as IPs change. SPIFFE and SPIRE provide cryptographic workload identities, and Cilium enforces mutual TLS u…
Cloudflare's Durable Objects now stay alive for the full duration of active outbound connections, eliminating the need for heartbeat code to prevent eviction during LLM token streaming. Zhipu's GLM-5.…
Diagrid released Dapr 1.18 with Verifiable Execution, adding cryptographic trust and tamper-evident records for distributed applications and AI agents. The update introduces Workflow History Signing, …
AI agents are being deployed at scale across enterprises without a coherent identity security model, creating a critical risk. Existing protocols like SPIFFE and OAuth 2.1 can solve this, but no refer…
Tigera announced the general availability of Lynx, a unified control plane for Kubernetes-native AI agents. Lynx provides enterprises with a single platform to discover, secure, and audit AI agents ac…
Dapr has introduced cryptographic tamper detection for workflow execution histories by signing each history event with the sidecar's mTLS identity, creating an auditable hash chain. The feature requir…
The Linux Foundation working group released the Agentic Resource Discovery (ARD) specification, a draft discovery layer that allows domains to advertise agent capabilities via a manifest at /.well-kno…
Lynx, a Kubernetes-native control and data plane for agentic AI traffic, launched this week. It provides a registry, gateway, audit, authentication, policy enforcement, and agent sandboxing without re…
AI code scanners become trustworthy only when fed explicit threat models, according to a cross-domain analysis of autonomous systems. Production agents require distributed-systems rigor including idem…
Christian Posta explores the concept of AI agent identity, arguing that agents are not human but can be treated as workloads using existing identity primitives like SPIFFE/WIMSE. He notes that for age…
CrowdStrike launched Continuous Identity for AI Agents at Identiverse 2026, a control plane that continuously authorizes agent actions in real time using cryptographically verifiable identities based …
Security teams should avoid sending sensitive threat intelligence data to cloud-based AI APIs due to compliance and data control risks. It introduces "The Sovereign Hive," a local-first AI system that…