[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fk5cCwkHNCGAPz6bkVLJXgBi81AAHs5tAkYm8JD1Q4_U":3},{"article":4,"iocs":49,"watch_terms":54,"solutions":55,"lesson":86},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":31,"category":32,"article_tags":36},"a51b15e5-c59f-44e9-a427-88cc9903c63c","Karina Portugal Makes the Case for Know Your Agent","karina-portugal-makes-the-case-for-know-your-agent-f250b7","Karina Portugal has spent more than ten years working in digital identity, fraud prevention, anti-money laundering and Know…","Karina Portugal, Director at Prove Identity, argues for a 'Know Your Agent' (KYA) approach to address the growing risks of AI software acting autonomously. Traditional Know Your Customer (KYC) methods are insufficient as compromised agents can retain legitimate credentials, leading to authorized but malicious actions. Portugal emphasizes the need for continuous authorization checks during agent execution, not just at initial access, citing a significant rise in AI-driven fraud.","Karina Portugal advocates for 'Know Your Agent' to verify AI software acting on behalf of users.","https:\u002F\u002Fhackread.com\u002Fkarina-portugal-case-for-know-your-agent\u002F","https:\u002F\u002Fhackread.com\u002Fwp-content\u002Fuploads\u002F2026\u002F10\u002Fkarina-portugal-case-ai-agent.jpg","2026-10-06T21:15:48+00:00","2026-10-06T22:00:22.528248+00:00",7,[17,20,23,25,27,29],{"name":18,"type":19},"AI Risk Management Framework","product",{"name":21,"type":22},"Prove Identity","vendor",{"name":24,"type":22},"Pindrop",{"name":26,"type":22},"Gartner",{"name":28,"type":22},"World Economic Forum",{"name":30,"type":22},"NIST","839da5c1-3c34-47e2-9499-f7201640e3ac",{"id":31,"icon":33,"name":34,"slug":35},null,"AI Security","ai-security",[37,42,44],{"category":38},{"id":39,"icon":33,"name":40,"slug":41},"2c8f44d4-b56e-47cf-9677-04f22c9ee78d","Identity & Access","identity-access",{"category":43},{"id":31,"icon":33,"name":34,"slug":35},{"category":45},{"id":46,"icon":33,"name":47,"slug":48},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[50],{"type":51,"value":52,"context":53},"malware","AI-driven or 'non-live' fraud","Pindrop data shows a 1,210% increase in AI-driven fraud during 2025.",[21,24,26],{"controls":56,"vendors":85},[57],{"slug":35,"name":58,"problem":59,"products":60},"AI application security","Prompt injection, data leaks through AI tools and unapproved AI use get caught.",[61,69,77],{"vendor_slug":62,"vendor_name":63,"vendor_logo":64,"product_slug":65,"product_name":66,"url":67,"description":68},"boomi","Boomi","\u002Fvendor-logos\u002Fboomi.png","boomi-ai-gateway","Boomi AI Gateway","https:\u002F\u002Fboomi.com\u002Fplatform\u002Fai-gateway\u002F","Gateway for AI model and MCP tool traffic, built on Lunar.dev technology. It limits which tools each agent can call. Its enterprise version adds an approval step for new MCP servers and logs each call with the user or agent behind it.",{"vendor_slug":70,"vendor_name":71,"vendor_logo":72,"product_slug":73,"product_name":74,"url":75,"description":76},"hiddenlayer","HiddenLayer","\u002Fvendor-logos\u002Fhiddenlayer.png","hiddenlayer-ai-security","HiddenLayer AI Security Platform","https:\u002F\u002Fhiddenlayer.com\u002F","Model scanning, AI red teaming and runtime protection for AI applications.",{"vendor_slug":78,"vendor_name":79,"vendor_logo":80,"product_slug":81,"product_name":82,"url":83,"description":84},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","prisma-airs","Prisma AIRS","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fai-security\u002Fprisma-airs","Security for AI applications, models and agents, including runtime protection against prompt injection.",[],{"slug":87,"title":88,"body":89,"framework_refs":90,"framework_notes":101},"ai-agents-need-know-your-agent-controls-beyond-initial-authentication","AI Agents Need 'Know Your Agent' Controls Beyond Initial Authentication","As AI agents increasingly act autonomously on behalf of users and organizations, traditional identity verification methods like KYC fall critically short — they authenticate at entry but not throughout execution. A compromised or malicious AI agent that has obtained legitimate credentials can perform authorized-looking actions that are actually harmful, bypassing perimeter-based controls entirely. This represents a fundamental gap in access control philosophy: authentication is a moment-in-time check, but authorization must be continuous. The rise in AI-driven fraud demonstrates that threat actors are already exploiting this blind spot at scale. Organizations must rethink identity and access frameworks to account for non-human agents as first-class principals requiring ongoing verification.",[91,92,93,94,95,96,97,98,99,100],"NIST SP 800-63 (Digital Identity Guidelines)","NIST AC-2 (Account Management)","NIST AC-6 (Least Privilege)","NIST IA-3 (Device Identification and Authentication)","CIS Control 5 (Account Management)","CIS Control 6 (Access Control Management)","CIS Control 8 (Audit Log Management)","GDPR Article 25 (Data Protection by Design and by Default)","NIST AI RMF (AI Risk Management Framework) — Govern 1.1","ISO\u002FIEC 27001 A.9 (Access Control)",{}]