TUNGKOL SA EPISODE NA ITO
The principle of least privilege access is ubiquitous in recommendations, but perhaps too uncommon in practice. Alex Olivier explains how the AuthZen Working Group has been approaching new standards, guidelines, and practical deployment patterns to make it easier for orgs to establish more refined and correct access policies. It's a problem that predates LLMs, but also one that agents and MCPs made all the more acute. We talk about what intent means when trying to constrain agents' activities, what role LLMs have in policy decisions, and how LLMs can help create a much-needed inventory of access controls.
Segment Resources:
- https://www.cerbos.dev/blog/dimmer-switch-not-a-kill-switch-rethinking-ai-agent-governance
- https://www.cerbos.dev/blog/multi-hop-delegation-ai-agents
- https://openid.net/wg/authzen/
Visit https://www.securityweekly.com/asw for all the latest episodes!
Show Notes: https://securityweekly.com/asw-403
Ingles
Estados Unidos
KOPYA NG SALIN 🔗
Are you the producer of this podcast?
Add a podcast transcript
Need Audio-to-Text?
Transcribe with Listen411 in Just 60 Seconds
I-SEARCH ANG MGA NAKARAANG EPISODE
I-search ang mga nakaraang episode ng Security Weekly Podcast Network (Audio).
IBA PANG MGA EPISOD SA PODCAST NA ITO
Klingons, Stop and Shop, OvHCloud, Microsoft, Plex2Shell, ReactOS, Aaran Leyland, and More on the Security Weekly News.
Visit https://www.securityweekly.com/swn for all the latest episodes!
Show Notes: https://securityweekly.com/swn-626
The OWAS Mobile Application Security (MAS) project recently released an updated version of its guidance, with excellent advice organized into common weaknesses, a verification standard for devs (MASVS), and a testing guide (MASTG). Ryan Lloyd and Jan Seredynski from Guardsquare dive into the projec…
In this episode, Kriss Stephen, Principal Solutions Architect at Semperis, explores the concept of the Minimum Viable Company and the three foundational capabilities every organization needs to withstand and recover from a cyberattack. Drawing from his experience in identity security and cyber resi…
Interview with Michael Jenkins from ThreatLocker Securing AI on the Endpoint - Zero Trust or Bust
Michael joins us for the first time to discuss strategies for securing the latest evolution of AI: local endpoint-based AI agents. Tools like Claude Code, OpenAI Codex, and Google AntiGravity give emp…
Mr. Sparkle, Burger King, Pwnscape, Linux, Cisco, GitHub, Microsoft, Josh Marpet, and More on this episode of the Security Weekly News.
Visit https://www.securityweekly.com/swn for all the latest episodes!
Show Notes: https://securityweekly.com/swn-625
Paunawa: Ang podcast at artwork na naka-embed sa page na ito ay mula sa Security Weekly Productions, na pag-aari ng may-ari nito at hindi kaakibat o ineendorso ng Listen Notes, Inc.
I-EDIT
Salamat sa pagtulong na mapanatiling naka-update ang database ng podcast.
