Posts

Showing posts with the label Identity Security

Governing Machine and AI-Agent Identities: Professor Kai London on the Worst-Controlled Class

Image
  By the Resolute Islands News Technology Desk Professor Kai London — board advisor & interim CISO/CIO/CTO. Credit: professorkailondon.com Amid all the attention on human passwords and phishing, Professor Kai London , a senior CISO, points to a quieter and faster-growing danger. “The fastest-growing and worst-controlled class of identity in almost every organisation is not human,” he says. “It is machines — service accounts, API keys, automation — and now AI agents that can act on their own.” “Every AI agent you deploy is a login with real reach. It needs an identity, a boundary, monitoring and a kill-switch — exactly like a privileged human user, only faster and at greater scale.” The invisible workforce London notes that machine identities typically outnumber human ones many times over, and are often granted broad, standing privileges that nobody reviews. “They were set up to make systems work, not to be governed,” he says. “That is precisely the problem.” AI agents change th...

The Last Login When Help Is Days Away: Professor Kai London on Identity Security for Remote Operations

Image
  By the Resolute Islands News Technology Desk Professor Kai London — CISO, cybersecurity & AI expert. Credit: professorkailondon.com In remote operations, the decisive breach rarely looks dramatic — and the consequences are magnified by isolation. “It looks like a login,” says Professor Kai London , a senior CISO. “An identity that authenticated when it should have been challenged — and in a remote operation, where help is days away, containing it quickly is everything.” “Every breach begins with a login that should have been stopped. Verify, limit, detect, prove — and be able to do it with the people you have on site.” Verify and limit Strong, phishing-resistant authentication for anything that matters, and least privilege so a single compromise reaches as little as possible. “Decide in advance how far any one identity can spread,” London says, “because you may not have time to figure it out during an incident.” Detect on your own Because malicious logins look legitimate, mon...