Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

netwrix

AI agents can inherit local admin rights

Sep 9, 2026 By Dirk Schrader In Netwrix
An AI agent runs as a process under whatever account launched it, and it inherits that account's access token. If the account has local admin rights, so does the agent, along with every helper process and script it spawns, an example would be Claude Desktop running under an admin account, spawning PowerShell helpers. What makes agents different from a typical privileged app is that their next action often comes from content parsed at runtime, including untrusted input.
Read Post

An agent breaks in production. Who's accountable?

Sep 9, 2026 By Teleport In Teleport
We asked eight security and product leaders who's accountable when an agent ships to production and breaks something. Nobody said the model. Harish Gaggar named the reason. An agent runs on permissions someone approved and configuration someone set. Ron Reiter drew the line in the same place, accountability sits with whoever decided what the agent could actually do. As agents act across more systems, the accountability trail gets harder to follow. Most teams cannot determine which human granted an agent access.
View Video
miniorange

How Is AI Transforming Identity and Access Management?

Sep 9, 2026 By Pratish Ray In miniOrange
Traditional Identity and Access Management (IAM) relies on authentication methods, predefined roles, and access policies to control who can access business applications and data. These controls remain essential, but they do not always provide enough context to identify unusual behavior or changing access risks. AI in Identity and Access Management (IAM) adds another layer of intelligence by analyzing login context, user behavior, device information, access patterns, and identity activity.
Read Post
Torq

How CISOs Should Brief the Board on AI in the SOC

Sep 9, 2026 By John White In Torq
John White is the Field CISO for EMEA at Torq. A respected security executive with more than 20 years of leadership experience, John previously served as CISO at Virgin Atlantic, where he led a multi-year transformation deploying the Torq AI SOC Platform to modernize cyber operations. Prior to that, he built and transformed security functions for global organizations, including ASOS, Liberty Global, AEG Europe, and KPMG.
Read Post
reach security

Posture Management: A Modern Approach to Building Security That Holds

Sep 9, 2026 By CP Morey In Reach Security
Security posture is one of the most used yet misunderstood concepts in cybersecurity. For some, it means being audit-ready. For others, it’s shorthand for how many tools are deployed across endpoints, identities, and cloud environments. But in practice, posture is something deeper. It’s the ability of your environment to withstand real-world threats, not just meet compliance requirements. Strong posture doesn’t just reflect what’s present.
Read Post
Why DevSecOps Teams Are Adopting an AI Pentesting Solution

Why DevSecOps Teams Are Adopting an AI Pentesting Solution

Sep 9, 2026 By SecuritySenses In SecuritySenses
Software teams today are shipping code faster than ever before. New features go live weekly, sometimes daily, and the pressure to stay ahead of competitors means security can no longer be treated as a final checkpoint before release. This shift has pushed DevSecOps teams to rethink how they test for vulnerabilities.
Read Post
apono

Vulnerability Assessments in an Agentic World: Step-by-Step Guide

Sep 8, 2026 By The Apono Team In Apono
An old package or a misconfigured cloud storage bucket can be identified by a legacy scanner, but it does not account for the unique risk profile of autonomous systems. It cannot confirm that an AI agent with access to your production environment can chain together a CRM read, an email send and a production write using inherited credentials. Your agents are dynamic: they plan, call tools, and act across multiple environments, and some may retain context or long-term memory beyond the original request.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.