An AI agent logged in, then kept looking
Spain's data protection authority has received what it describes as the first breach notification for an attack carried out by an AI agent. It has not yet verified the claim.
SEPTEMBER 17, 2026
TopicIdentity
The agent is a privileged user
Software that reads your systems and acts on them has the access profile of an administrator. Most organisations are not treating it like one.
SEPTEMBER 7, 2026
Passwords are leaving by attrition
Almost nobody has switched off passwords. A great many organisations have quietly stopped using them for the sign-ins that matter, which is a different thing.
SEPTEMBER 4, 2026
The help desk is the way in
Federal advisories describe the same route into hardened companies: a phone call, a password reset, and an MFA token moved to a new device.
AUGUST 29, 2026
Cybersecurity spending shifts toward identity and resilience
Budgets are moving from perimeter tools to identity infrastructure and recovery capability, tracking where the losses actually happen.
AUGUST 11, 2026
Machine identity sprawl becomes security's biggest inventory problem
Service accounts, API keys, and agent credentials now outnumber human identities many times over, and governance is racing the growth.
JULY 10, 2026