The Agentic Era Just Got the Authentication Model It Needs

Workload identity federation has come to AI agents. The agentic identity era starts here. Using API Keys to access AI platforms was never going to survive the agentic era. Anthropic’s support for Workload Identity Federation is a confirmation of that reality. By supporting Workload Identity Federation, AI agents can now authenticate with short-lived, cryptographically verifiable …

Shai-Hulud npm Supply Chain Attack: Why Secrets Fueled the Worm

From OAuth Tokens to API Keys: The Toxic Data Behind the Salesloft Drift / Salesforce Breach

MFA vs Multi-Attestation: Why AI Needs a New Identity Model

Service Accounts Were a Shortcut. Now They’re a Liability. It’s time to go Accountless.

When AI Knew Too Much: A Cautionary Tale About Agentic Systems Without Guardrails

Wiz’s Base44 Vulnerability Findings Spotlight a Fixable Gap: Non-Human Identity

Another Day, Another Leaked API Key — This Time, It’s xAI

McDonald’s McHire Breach Shows Why APIs Need Non-Human Identity and Strong Auth

Want Control Over Secrets? Start with Your Strategic Control Point: CI/CD.

Secret Sprawl: Understand It To Reduce Your Risk

Asana’s MCP Bug Wasn’t Unique — It Was a Sign of What’s Coming

AI’s Security Problem Isn’t AI — It’s Everything Around It