A new joint guide from NIST, CISA, and the NSA highlights that identity records are the primary evidence when autonomous AI agents act outside their intended parameters.
NIST, CISA and the NSA have released ten voluntary practices for organizations preparing for, detecting, and recovering from rogue AI agent incidents.
New NIST and CISA guidance on securing identity tokens fails to fully address the unique authorisation challenges and risks introduced by autonomous AI agents.
CISA and NIST have released new technical guidance to harden cloud identity tokens against theft, forgery, and misuse in SSO and API environments.
As NIST finalises post-quantum cryptography standards, organisations must prepare for 'harvest-now-decrypt-later' attacks by prioritising data with long confidentiality requirements.