Keycloak 26.7, released this month, adds production-ready OAuth 2.1 authorization for AI agents using the Model Context Protocol, enabling per-tool scopes and eliminating the default all-or-nothing ac…
Red Hat Senior Principal Product Security Engineer Garth Mollett discussed AI supply chain security on Software Engineering Radio, detailing how it differs from conventional software supply chains and…
Kubernetes network policies based on IP addresses become insecure when pods are rescheduled, as IPs change. SPIFFE and SPIRE provide cryptographic workload identities, and Cilium enforces mutual TLS u…
Tigera announced the general availability of Lynx, a unified control plane for Kubernetes-native AI agents. Lynx provides enterprises with a single platform to discover, secure, and audit AI agents ac…
Lynx, a Kubernetes-native control and data plane for agentic AI traffic, launched this week. It provides a registry, gateway, audit, authentication, policy enforcement, and agent sandboxing without re…
Uber and Auth0 are rethinking access control for AI agents, moving beyond traditional user or service-account models. Uber's architecture propagates agent identity and provenance across multi-agent wo…
AI code scanners become trustworthy only when fed explicit threat models, according to a cross-domain analysis of autonomous systems. Production agents require distributed-systems rigor including idem…