MILLENIUMS.AI launched Redthread, an AI-Native Application Protection Platform (ANAPP) that autonomously pentests chatbots, agents and RAG endpoints against the OWASP LLM Top 10, mapped to MITRE ATLAS…
A new open-source policy enforcement gateway intercepts every AI agent tool call and validates it against a Pydantic schema, an OPA policy, a SPIFFE/SPIRE cryptographic workload identity, and an ImmuD…
Zalando has open-sourced the Agentic Identity Broker, an MIT-licensed component that lets AI agents act on behalf of users across third-party systems without ever holding the users' provider tokens. T…
DigiCert has introduced AI Trust, a governance framework that assigns every AI agent a credential with an expiry date and a named human owner, built on the company's public key infrastructure, DNS, an…
Know Your Agent (KYA) uses a machine-readable, transaction-scoped credential to prove an autonomous agent's identity and authorization, complementing OAuth, API keys, machine identity, and traditional…
A developer outlined a layered architecture for AI agent authentication, arguing that no single protocol suffices and that discovery, workload identity, request authentication, and delegated authoriza…
A developer built a demo where an AI agent calls a model without any certificate files, using SPIFFE and SPIRE to issue identities at runtime. The gateway's authorization policy is based on SPIFFE IDs…
Saviynt Inc. Senior Practice Director Tuhin Banerjee argues that role-based access control (RBAC) is failing to govern autonomous AI agents, citing a 2026 industry survey where 59% of organizations ad…
The Coalition for Secure AI (CoSAI), an OASIS Open Project, hosted a hybrid working session on August 28 to advance the Open Delegation & Identity Standard (ODIS), a vendor-neutral architecture for cr…
A developer has published the final part of a series on trusted AI agent transactions, demonstrating an end-to-end proof that integrates PingFederate, SPIRE, and PingAuthorize to secure agent actions.…
A developer detailed the use of SPIRE workload identity in trusted AI agent transactions, explaining how SPIFFE IDs provide cryptographically attested runtime identities distinct from logical agent po…
AI agents that hold long-lived bearer credentials in their environment, config, or context window create a systemic leak risk because any entity that obtains the credential can reuse it, and agents ma…
The Cloud Native Computing Foundation (CNCF) argues that the future of agentic AI will be built on the mature cloud-native ecosystem, not entirely new infrastructure, drawing on experience building a …
Red Hat Senior Principal Product Security Engineer Garth Mollett discussed AI supply chain security on Software Engineering Radio, detailing how it differs from conventional software supply chains and…
Gartner predicts over 40% of agentic AI projects will be canceled by 2027, with the EU AI Act's human oversight requirements taking effect in 2026. A product leader argues that success depends on infr…
Non-human identities such as CI/CD agents, Kubernetes workloads, and AI agents are increasingly calling APIs across cloud environments, requiring both machine-to-machine (M2M) authentication and API s…
Kubernetes network policies based on IP addresses become insecure when pods are rescheduled, as IPs change. SPIFFE and SPIRE provide cryptographic workload identities, and Cilium enforces mutual TLS u…
Cloudflare's Durable Objects now stay alive for the full duration of active outbound connections, eliminating the need for heartbeat code to prevent eviction during LLM token streaming. Zhipu's GLM-5.…
Diagrid released Dapr 1.18 with Verifiable Execution, adding cryptographic trust and tamper-evident records for distributed applications and AI agents. The update introduces Workflow History Signing, …
AI agents are being deployed at scale across enterprises without a coherent identity security model, creating a critical risk. Existing protocols like SPIFFE and OAuth 2.1 can solve this, but no refer…