Stale job access lingers because nobody owns removal
The author says role transfers should trigger a deletion review, with named owners and expiry dates on extra rights.
Stories per day · 30 days
2 RSS
Relatedprompt-injection5agent-security4ai-agents4llm-agents2mcp2microsoft2access-management1agent-identity1attestation1authorization1check-point1detection-engineering1entra1google-api1guardrails1identity1insider-threat1microsoft-graph1
24 stories, newest first · one card per story
Stories tagged #least-privilege
PRISM paper cuts LLM agent tool privileges using causal roles
On AgentDojo, tau-bench and ToolEmu, authors report 78.3% fewer tools per role and a 15.9% blast radius.
Intent-graph audit checks agent tool calls without a per-call model
A deterministic loop checks each call in a median 5.7 microseconds, and flagged calls go to a reasoning guardian.
Opinion: lock down MCP servers before an LLM rollout
The piece treats MCP hosts like database drivers and lists controls from input checks to human approval of high-risk actions.
1
Many minimal agent tool grants cannot be ranked
For 29.8–33.3% of Microsoft Graph tasks, minimal sufficient grants form an antichain with no smaller choice.
Corelight field CTO urges human review before SOC agents act
Vince Stoffer says teams should watch shadow AI, least privilege, change audits, and network use of AI.
Tines argues employee-built AI workflows need runtime controls
The piece says education, sandboxes, and committees do not govern credentials, data access, or orphaned workflows after they go live.
Microsoft announces Guardian Agents to constrain AI agent permissions
Discovery now covers 60 local agent types, and risk signals can revoke access or stop an agent.
Microsoft frames AI agents as insider threats needing live controls
Dynamic Permissions start at zero and last only for a task; Guardian Agents follow human playbooks.
2
Small Agents, Smaller Blast Radius: Controlling What AI Can Do, (Fri, Oct 16th)
SANS argues defenders should build small least-privilege AI agents rather than caging general-purpose ones, citing Check Point's tool-call deviation detection.
4
How to keep AI agents within their permissions
Token Security explains how to stop AI agents from using credentials outside their assigned tasks.
5
Best Just-in-Time (JIT) Access Tools Compared (2026): Features & Pricing
Comparison of twelve just-in-time access tools across PAM, cloud-native, infrastructure, and governance lanes, with Microsoft Entra PIM as bundled baseline.
5
Securing Agent-to-Agent Communication: The Next Identity Frontier
Rapid7 urges identity, least-privilege, and telemetry controls for autonomous AI agent-to-agent communication.
4
Google Gemini Will Soon Get Full Access Permission to Use Your Computer
Unreleased Gemini Desktop Full Access could let the assistant control files, apps, and network activity on a Mac.
IAM for AI agents: A Practical Enterprise Framework
Guide proposes an IAM framework for AI agents, treating each agent as a governed non-human identity with scoped, expiring, auditable access.
Privilege Hygiene: Least Privilege Best Practices Guide
Huntress outlines least-privilege steps to limit blast radius from excess admin rights in Microsoft 365.
1
Business Survival in the Age of AI
Oasis Security executive argues enterprises need 'least agency' controls for AI agents, citing a Cursor agent's nine-second production database deletion and Claude Desktop flaw.
2
The AI security question leaders should be asking instead
Gremlin security officer Frederic Bull argues AI has eroded the attacker-defender skill asymmetry while least-privilege controls remain essential for securing AI agents.
2
Give every teammate and agent the right level of access to your Workers
Cloudflare launches per-Worker granular access controls with four roles, enabling least-privilege access for teammates, AI agents, and CI/CD pipelines.
6
Top 10 Best Cloud Infrastructure Entitlement Management (CIEM) Tools in 2026
2026 CIEM guide ranks Wiz, Prisma Cloud, Okta, Entra Permissions Management and specialists Sonrai, Britive, Tenable/Ermetic for cloud entitlement right-sizing.
2
12 Best Endpoint Privilege Management (EPM) Tools Compared (2026): Features & Pricing
A 2026 buyer's guide compares 12 endpoint privilege management tools, ranking CyberArk and BeyondTrust as enterprise leaders.
5
Top 10 Best Endpoint Privilege Management (EPM) Tools in 2026
A 2026 scorecard ranks ten endpoint privilege management tools, led by BeyondTrust, ThreatLocker and Delinea for elevation, coverage and policy depth.
2
A five-part inventory for your AI agent credentials
Orchid's CEO recommends inventorying five attributes of AI agent credentials to rein in over-privileged OAuth tokens and service accounts.
How MCP Servers Can Expose Enterprise Secrets
MCP servers holding AI agent credentials risk secret exposure via plaintext configs, credential sprawl, prompt injection, and over-permissioning; mitigations include centralization and least privilege.
10