ဤအပိုင်းအကြောင်း
The principle of least privilege access is ubiquitous in recommendations, but perhaps too uncommon in practice. Alex Olivier explains how the AuthZen Working Group has been approaching new standards, guidelines, and practical deployment patterns to make it easier for orgs to establish more refined and correct access policies. It's a problem that predates LLMs, but also one that agents and MCPs made all the more acute. We talk about what intent means when trying to constrain agents' activities, what role LLMs have in policy decisions, and how LLMs can help create a much-needed inventory of access controls.
Segment Resources:
- https://www.cerbos.dev/blog/dimmer-switch-not-a-kill-switch-rethinking-ai-agent-governance
- https://www.cerbos.dev/blog/multi-hop-delegation-ai-agents
- https://openid.net/wg/authzen/
Visit https://www.securityweekly.com/asw for all the latest episodes!
Show Notes: https://securityweekly.com/asw-403
အင်္ဂလိပ်
အမေရိကန်ပြည်ထောင်စု
ကူးယူချက် 🔗
Are you the producer of this podcast?
Add a podcast transcript
Need Audio-to-Text?
Transcribe with Listen411 in Just 60 Seconds
ပြီးခဲ့သည့် အပိုင်းများကို ရှာဖွေပါ
Security Weekly Podcast Network (Audio) ၏ ယခင်အပိုင်းများကို ရှာဖွေပါ
ဤ PODCAST တွင် အခြားသော အပိုင်းများ
Mr. Sparkle, Burger King, Pwnscape, Linux, Cisco, GitHub, Microsoft, Josh Marpet, and More on this episode of the Security Weekly News.
Visit https://www.securityweekly.com/swn for all the latest episodes!
Show Notes: https://securityweekly.com/swn-625
In the security news this week:
Convert this router into an SDR
Ivanti straight to root
Anthropic’s AI worm FUD
A kernel exploit to fix downloads
Supermarket refrigeration attacks
400 mystery Java vulnerabilities
Authentication bypass
Russia meets the data-center war
Stop & Shop atta…
Interview with Michael Jenkins from ThreatLocker Securing AI on the Endpoint - Zero Trust or Bust
Michael joins us for the first time to discuss strategies for securing the latest evolution of AI: local endpoint-based AI agents. Tools like Claude Code, OpenAI Codex, and Google AntiGravity give emp…
Klingons, Stop and Shop, OvHCloud, Microsoft, Plex2Shell, ReactOS, Aaran Leyland, and More on the Security Weekly News.
Visit https://www.securityweekly.com/swn for all the latest episodes!
Show Notes: https://securityweekly.com/swn-626
The OWAS Mobile Application Security (MAS) project recently released an updated version of its guidance, with excellent advice organized into common weaknesses, a verification standard for devs (MASVS), and a testing guide (MASTG). Ryan Lloyd and Jan Seredynski from Guardsquare dive into the projec…
မသက်ဆိုင်ကြောင်းရှင်းလင်းချက်: ဤစာမျက်နှာပေါ်တွင် ထည့်သွင်းထားသော ပေါ့တ်ကာစ်နှင့် အနုပညာလက်ရာများသည် ၎င်း၏ပိုင်ရှင်၏ပိုင်ဆိုင်မှုဖြစ်သည့် Security Weekly Productions မှဖြစ်ပြီး Listen Notes, Inc နှင့် ဆက်နွှယ်ခြင်း သို့မဟုတ် ထောက်ခံထားခြင်းမရှိပါ။
ပြင်ဆင်ပါ
ပေါ့ဒ်ကတ်စ် ဒေတာဘေ့စ်ကို နောက်ဆုံးပေါ်အချိန်နှင့်တပြေးညီဖြစ်စေရန် ကူညီပေးသည့်အတွက် ကျေးဇူးတင်ပါသည်။
