Sander

If you’re having conversations about AI Agents and security right now, then you’re likely hearing what I’m hearing. There are many statements that say things like “AI Agents will…” or “... something something using AI Agents.” Statements like that point to a fundamental problem. AI Agents are being

How’s that for a sensationalist headline?!? But I promise I’m going to back it up.  In my “Arguing about agent identity” talk at Identiverse a week ago, I asked everyone to use the AI urgency to achieve IAM goals; more specifically NHI goals. The board level pushing to

Originally published at Astrix Security: Securing LLMs, AI Agents, and MCP: Unpacking the New CIS Companion Guides. Today the Center for Internet Security (CIS) published three new Companion Guides extending the CIS Critical Security Controls to AI systems: one for LLMs, one for AI agents, and one for MCP environments.

Originally published on LinkedIn: https://www.linkedin.com/pulse/glasswing-glass-houses-onions-attention-jonathan-sander-kwfbe/ If you’ve been in security long enough, you’ve definitely been involved in lots of code reviews. I have seen my fair share. Like many of you I’m sure, I’ve

Originally published on LinkedIn: https://www.linkedin.com/pulse/everybody-ai-fighting-rsa-went-fast-lightning-jonathan-sander-pbh8c/ Three AI Agent Conversations that were a Little Bit Frightening RSA is a yearly ritual for me that has become as much about seeing old friends as getting the security industry