04
Oct
Part 8 — The CISO’s Cloud Security Agenda for 2027
16 min read
Agentic AI
Agentic AI explores autonomous and semi-autonomous AI systems that can reason, plan, use tools, access data, and act across enterprise environments. Coverage focuses on AI agents, multi-agent systems, identity, authorization, MCP, delegated authority, security architecture, governance, and the emerging risks CISOs must address as AI moves from generating information to taking action.
04
Oct
Part 7 — From Least Privilege to Least Agency
16 min read
04
Oct
Part 6 — AI Systems Are Becoming Security Domains of Their Own
14 min read
04
Oct
Part 3 — When Non-Human Identities Outnumber Humans
Non-human identities are becoming the dominant identity population. The real risk is not their number, but whether machine authority grows faster than human accountability. Who owns the identities that increasingly act for us?
13 min read
04
Oct
Part 2 — Identity Is Becoming the New Cloud Control Plane
Identity no longer just determines who can access the cloud. It determines who — or what — can change it. As infrastructure becomes programmable and agents gain authority, identity itself is becoming the new cloud control plane.
11 min read
04
Oct
Part 1 — The Cloud Has Changed — Our Security Model Hasn’t
The cloud attack surface is no longer just a collection of assets. Identity, APIs, AI agents and third parties create paths where risk emerges from relationships. Attackers already see the graph. Do defenders?
11 min read
04
Oct
The Cloud Has Changed — Our Security Model Hasn’t
Cloud security is shifting from protecting assets to governing relationships, identities and autonomous actors. This eight-part CISOsCISO series explores what the CSA Top Threats 2026 mean for CISOs — and why the next frontier is digital agency.
8 min read
03
Oct
Black Hat USA 2026 — The Architecture of Trust Is Changing
Black Hat USA 2026 points to a fundamental shift in cybersecurity: from protecting assets to governing authority. Across AI agents, MCP, identity, supply chains, cloud, hardware and OT, this 12-part CISO series explores how the architecture of trust is changing.
10 min read
02
Oct
Part 13 — The CISO Security Model After DEF CON 34
DEF CON 34 exposed a fundamental shift: attackers increasingly exploit relationships, not isolated components. CISOs must move beyond assets and vulnerabilities toward governing authority paths—who can instruct, authenticate, invoke and ultimately cause what to happen.
14 min read
02
Oct
The Shadow AI Economy: From Shadow IT to Shadow Agency
Shadow AI is becoming Shadow Agency. At PAC Horizons 2026, I discussed how AI agents, identities, tokens and delegated authority are changing the CISO agenda — and why Least Privilege may no longer be enough.
8 min read