Stop securing AI agents with standard service principals, it breaks enterprise IAM. I propose a 3-part test to answer this: when does a workload become an autonomous agent? Don't grant static permissions to non-deterministic agents. idpro.org/from-non-hum... #IAM #CloudSecurity #AgenticAI

From Non-Human Identity to Agent Identity

Non-human identities routinely outnumber humans. However, AI introduces a new class that breaks the security assumptions of NHI.

idpro.org

OWASP Seattle Chapter is proud to present OWASP API Security Testing Framework (ASTF) for the upcoming virtual meeting on 29th October at 5 PM PST. Grab your evening snack and join us - OWASP Seattle Chapter is looking forward to see you all! us06web.zoom.us/j/8953887409...

The OpenID Foundation’s AIIM CG released A Protocol-Agnostic Threat Classification for Cross-Boundary AI Agent Authorization. It maps multi-gateway agentic federation across six key security dimensions, a must-read for IAM and security architects.

Excited to share that a new consumer-focused "What are passkeys?" website whatarepasskeys.info is online, thanks @timcappalli.me

Passkeys Explained: The Easier, Safer Way to Sign In

Passkeys replace your password with a unique digital key. Easier and safer to use — no passwords to remember, no codes to wait for.

whatarepasskeys.info

New chapter: I've joined the Agent Control Standard (ACS) contributor group & supported the OWASP GenAI Security Project! AI agents act for us, but lack standard tracking/stops. ACS is a vendor-neutral control layer fixing this with runtime policies & OpenTelemetry. Want to help? DM me!

Agent Control Standard (ACS)

Widescale adoption of AI agents depends on trust, and trust requires transparency and control. Enterprises cannot rely on black-box agents operating across cloud, SaaS, on-premises and endpoint enviro...

genai.owasp.org

The new OWASP Top 10 for LLM Applications 2026 is officially out, and it is a must-read for anyone in the security and engineering space. genai.owasp.org/resource/owa...

OWASP GenAI LLM Top 10 2026

OWASP Top 10 for LLM Applications 2026 is the latest community-driven guide to the most critical security risks facing applications powered by large language models. Developed by hundreds of AI securi...

genai.owasp.org