[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fL5vylTaEmsBzMSoLosN7MQTYmEv_4bIATcHZN4dr1Co":3},{"article":4,"iocs":55,"watch_terms":60,"solutions":61,"lesson":154},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":32,"category":33,"article_tags":37},"ecca5573-a3be-4a90-a6d1-4f12fd5ead97","Zero Trust for AI Agents Starts With Fixing Zero Visibility","zero-trust-for-ai-agents-starts-with-fixing-zero-visibility-3c874b","The way we talk about AI agents is shifting, and the way we implement them requires an even more fundamental shift. While earlier discourse focused on how quickly organizations could stand up agents and how much productivity they could promise, a string of recent incidents, including a widely discussed intrusion at Hugging Face during an evaluation of OpenAI agents, has spurred organizations to","Organizations are deploying AI agents without adequate visibility or oversight, leading to shadow IT risks and potential security incidents. A recent attack on METR, stemming from an unmonitored AI agent, highlights the dangers of unconstrained API key usage and the lack of spending limits. Applying Zero Trust principles requires establishing inventory and visibility before implementing enforcement controls.","AI agents lack visibility, creating shadow IT risks and enabling attacks like the METR incident.","https:\u002F\u002Fthehackernews.com\u002F2026\u002F09\u002Fzero-trust-for-ai-agents-starts-with.html","https:\u002F\u002Fblogger.googleusercontent.com\u002Fimg\u002Fb\u002FR29vZ2xl\u002FAVvXsEhbfTXTCeNSvaPIRWOUJJxKPfYp45QnSjl24XZ1Set210zScJhg03o_TYX0QKPQdcSq-vkiWnymSqBu-bSwcCm1Kb2Te5do1VIcbCQjc_-TOOR6VwqRiHu5LE-tBb0gdrDjmPuDADfUraASQenGh-1gI4PF_xa2GwREsDM4vq4_C-aEU8EJsBBvhykJ1E0\u002Fs1600\u002Fsans-article.jpg","2026-09-26T10:30:00+00:00","2026-09-26T20:00:14.990786+00:00",8,[17,20,22,24,27,29],{"name":18,"type":19},"OpenAI agents","product",{"name":21,"type":19},"AWS",{"name":23,"type":19},"Azure",{"name":25,"type":26},"Hugging Face","vendor",{"name":28,"type":26},"Veeam",{"name":30,"type":31},"attacker","threat_actor","839da5c1-3c34-47e2-9499-f7201640e3ac",{"id":32,"icon":34,"name":35,"slug":36},null,"AI Security","ai-security",[38,40,45,50],{"category":39},{"id":32,"icon":34,"name":35,"slug":36},{"category":41},{"id":42,"icon":34,"name":43,"slug":44},"c5eccf7c-abbc-4bd3-bbed-e6da5cba8e73","Incident Response","incident-response",{"category":46},{"id":47,"icon":34,"name":48,"slug":49},"c70f3a41-2f0c-4608-870d-b8cbcd8be076","Cloud Security","cloud-security",{"category":51},{"id":52,"icon":34,"name":53,"slug":54},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[56],{"type":57,"value":58,"context":59},"malware","vibe-coded agentic app","A type of AI agent used in an attack.",[25,28,18],{"controls":62,"vendors":148},[63,92,120],{"slug":64,"name":65,"problem":66,"products":67},"identity-governance","Identity governance and single sign-on","People who leave or change roles lose access everywhere at once, and forgotten accounts stop piling up.",[68,76,84],{"vendor_slug":69,"vendor_name":70,"vendor_logo":71,"product_slug":72,"product_name":73,"url":74,"description":75},"omada","Omada","\u002Fvendor-logos\u002Fomada.png","omada-identity-cloud","Omada Identity Cloud","https:\u002F\u002Fomadaidentity.com\u002Fproducts\u002Fomada-identity-cloud\u002F","Identity governance and administration delivered as a service.",{"vendor_slug":77,"vendor_name":78,"vendor_logo":79,"product_slug":80,"product_name":81,"url":82,"description":83},"okta","Okta","\u002Fvendor-logos\u002Fokta.png","workforce-identity","Okta Workforce Identity","https:\u002F\u002Fwww.okta.com\u002Fproducts\u002Fworkforce-identity\u002F","Single sign-on, adaptive MFA including phishing-resistant methods, and lifecycle management for employees.",{"vendor_slug":85,"vendor_name":86,"vendor_logo":87,"product_slug":88,"product_name":89,"url":90,"description":91},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","entra-id","Microsoft Entra ID","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fidentity-access\u002Fmicrosoft-entra-id","Cloud identity and access management with single sign-on, conditional access, passkeys and identity governance.",{"slug":93,"name":94,"problem":95,"products":96},"asset-inventory","Cyber asset inventory","You cannot patch, monitor or protect the devices, cloud resources and accounts you do not know you have.",[97,105,112],{"vendor_slug":98,"vendor_name":99,"vendor_logo":100,"product_slug":101,"product_name":102,"url":103,"description":104},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-cyber-assets","Axonius Cyber Assets","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fcyber-assets","A continuously reconciled view of every asset, who owns it, which security controls cover it and where it drifts from policy.",{"vendor_slug":106,"vendor_name":107,"vendor_logo":108,"product_slug":109,"product_name":107,"url":110,"description":111},"lansweeper","Lansweeper","\u002Fvendor-logos\u002Flansweeper.png","lansweeper-asset-inventory","https:\u002F\u002Fwww.lansweeper.com\u002Fproduct\u002Fasset-inventory\u002F","Discovery with and without agents that keeps one central, always-updated inventory of devices, software and their details.",{"vendor_slug":113,"vendor_name":114,"vendor_logo":115,"product_slug":116,"product_name":117,"url":118,"description":119},"runzero","runZero","\u002Fvendor-logos\u002Frunzero.png","runzero-platform","runZero Platform","https:\u002F\u002Fwww.runzero.com\u002Fplatform\u002F","Finds and fingerprints everything on the network and in the cloud, including IoT and OT devices, without agents or credentials, and flags exposures.",{"slug":36,"name":121,"problem":122,"products":123},"AI application security","Prompt injection, data leaks through AI tools and unapproved AI use get caught.",[124,132,140],{"vendor_slug":125,"vendor_name":126,"vendor_logo":127,"product_slug":128,"product_name":129,"url":130,"description":131},"hiddenlayer","HiddenLayer","\u002Fvendor-logos\u002Fhiddenlayer.png","hiddenlayer-ai-security","HiddenLayer AI Security Platform","https:\u002F\u002Fhiddenlayer.com\u002F","Model scanning, AI red teaming and runtime protection for AI applications.",{"vendor_slug":133,"vendor_name":134,"vendor_logo":135,"product_slug":136,"product_name":137,"url":138,"description":139},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","prisma-airs","Prisma AIRS","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fai-security\u002Fprisma-airs","Security for AI applications, models and agents, including runtime protection against prompt injection.",{"vendor_slug":141,"vendor_name":142,"vendor_logo":143,"product_slug":144,"product_name":145,"url":146,"description":147},"boomi","Boomi","\u002Fvendor-logos\u002Fboomi.png","boomi-agentstudio","Boomi Agentstudio","https:\u002F\u002Fboomi.com\u002Fplatform\u002Fagentstudio\u002F","Agent builder whose Agent Control Tower registers and monitors Boomi agents and agents on Amazon Bedrock, Microsoft Copilot and other platforms, keeps audit logs and can switch agents off where the provider allows it.",[149],{"slug":150,"name":28,"logo_path":151,"roles":152},"veeam","\u002Fvendor-logos\u002Fveeam.png",[153],"reported_by",{"slug":155,"title":156,"body":157,"framework_refs":158,"framework_notes":170},"ai-agents-deployed-without-visibility-create-shadow-it-security-risks","AI Agents Deployed Without Visibility Create Shadow IT Security Risks","Organizations are rushing to deploy AI agents without first establishing the foundational visibility required to govern them safely, effectively creating a new wave of shadow IT. The attack on METR demonstrated that unmonitored AI agents with unconstrained API keys can act autonomously in ways that cause real security incidents and financial exposure. Without an inventory of what AI agents exist, what permissions they hold, and what actions they are taking, Zero Trust enforcement is impossible to implement. This matters because AI agents can generate API calls, consume resources, and exfiltrate data at machine speed — far faster than human-driven threats. Visibility and inventory are not optional prerequisites; they are the foundational controls from which all other AI governance must follow.",[159,160,161,162,163,164,165,166,167,168,169],"CIS Control 1 – Inventory and Control of Enterprise Assets","CIS Control 5 – Account Management","CIS Control 8 – Audit Log Management","NIST SP 800-207 – Zero Trust Architecture","NIST AC-2 – Account Management","NIST AC-6 – Least Privilege","NIST AU-2 – Event Logging","NIST AU-12 – Audit Record Generation","NIST SP 800-53 IA-9 – Service Identification and Authentication","ITIL – Service Asset and Configuration Management","GDPR Article 32 – Security of Processing (where AI agents handle personal data)",{}]