Zero trust has a big AI agent problem ahead
Experts argue agentic AI undermines zero trust: chained authorized actions create exfiltration paths, unregistered agents evade identity controls, and agent-to-agent messages stay opaque.
Security practitioners including Nik Kale (CoSAI), Krti Tallam (Kamiwaza.ai), and Mike Wilkes (Aikido Security) argue that agentic AI breaks zero trust assumptions because individually authorized actions can compose into unauthorized outcomes, such as chained reads and writes creating an exfiltration path. Most enterprise agents are unregistered shadow IT or third-party launched, subagents inherit privileges without recognized identity, and agent-to-agent communication, sometimes embedding instructions in media files, remains invisible to security teams. Proposed mitigations include short-lived delegated credentials modeled on OpenPGP subkeys, rate limits, sandboxing, approval gates, and immutable activity trails.