Packing my bags for hacker summer camp, immediately after 2 week of vacation, is no small task. #Blackhat #DEFCON #BSLV

Is that...is that a weekend I see over there?

Giving an #AI agent full access for testing has a way of becoming permanent. "It worked in test" is a thing. Clean up prototypes before they become production.

#AI security starts before the prompt and continues after the response. Credential use is the part that needs discipline.

The biggest mistake in agentic #AI is convenience first, governance later. Later usually arrives after the exposure.

Credentials now move through browsers, terminals, IDEs, CI jobs, and agent frameworks. Security has to meet them there. Otherwise fire bad...something something.

The easiest way to lose control of agentic #AI is to treat non-human access like a copy of human access. It's really not that hard.

I didn’t realize the Moroccans sent their swim team to the FIFA World Cup. I’ve never seen so much diving.

Most enterprise AI risk is not science fiction. It is exposed keys, shared vaults, stale service accounts, and missing approval paths. and a Happy #July_4th to my American cousins!

Where is the Turtle?

A smart model can still run inside a weak control plane. Over-permissioned agents fail with confidence.

If your AI agent can reach customer data, prod systems, and SaaS admin panels with the same token, you do not have automation. You have concentrated risk.

Fresh Chasing Entropy podcast goodness now available! In this episode of the @1Password Chasing Entropy podcast, I sit down with Jaya Baloo, co-founder and COO/CISO of AISLE™, to unpack one of the most important shifts happening in cybersecurity right now: the collision of #AI, vulnerability management, and operational reality. Link: podcasts.apple.com/ca/podcas…

That awkward moment when you realize that the conference put your former company name on your conference badge.

Bill C-22 is a fool’s errand.

Spooky

Cisco reported record profit and cut 4,000 people the same day. This is cold as hell. My thoughts are with my former colleagues who find themselves out of job. arstechnica.com/information-…

Started the week sick as a dog. Ending the week writing agents like crazy. The pendulum has swung in my favour.

AI adoption creates a second wave of secret sprawl. Prompts, logs, env files, browser sessions, and test repos all become leak points. Secure that **** yesterday!