AI agents can misuse valid credentials to exceed their permissions, presenting security risks that traditional controls may overlook, with token security providing tailored enforcement strategies.
Critical vulnerabilities in Armatura LLC's Armatura One expose access control systems to unauthorized access and arbitrary code execution risks.
Attackers accessed the Florida Department of Highway Safety and Motor Vehicles' DAVID database using stolen police department credentials, resulting in a data breach.
Aesto LLC, operating as Aesto Health, disclosed a data breach impacting over 9.5 million patients, highlighting critical risks to patient data security.
A Canadian individual admitted guilt in a data theft scheme targeting Snowflake cloud accounts, compromising sensitive data from at least 165 organizations and pursuing extortion.
Microsoft highlights enforcing least privilege identity, access, and auditing controls to secure autonomous AI agents and prevent misuse.