Attack Paths

11
Sep
The Network Is Not the Security Boundary

The Network Is Not the Security Boundary

16 min read
19
Aug
MCP Is Becoming an Attacker’s Routing Layer

MCP Is Becoming an Attacker’s Routing Layer

An AI agent’s real privilege extends far beyond its IAM permissions. MCP, managed identities and connected services create transitive authority paths that attackers can exploit—turning tool connectivity into a new routing layer for enterprise privilege.
17 min read