Pinned Tweet
I wanna talk to people want to talk about how they are rolling out agents in their orgs.
The goods, the bads, the uglies!
Trying to fix a throughput bug on node containers, and realized I'm running into Fargate bandwidth limitations.
A lot of companies are going to realize cyber security is actually cyber defense and that makes them
DBSC + DPoP are no longer avoidable,
developer.chrome.com/docs/we…
datatracker.ietf.org/doc/htm…
Attackers took over Microsoft 365 accounts at 79 orgs with stolen session tokens. No password, no MFA prompt. MFA checks you once at login, then every request rides on the token. Bind sessions to devices. A stolen token is a login your MFA never sees.
helpnetsecurity.com/2026/10/…
Note that not everyone updates. So even if you ship an OS patch, an early adopter decompiling and reverse engineering can abuse the leverage.
Now that said, this same attack also exists with models far weaker than GLM-5.3, like Opus 4.1 levels should be sufficient.
Need 15-30 minutes max, keen to hear about how ya'll are thinking about what the agent (s) gets accesss to, how, is it audited, what are the teams wanting?
ShrekOverflow retweeted
Honored that @WorkOS has been named to this year’s Cyber60 list 🚀
lsvp.com/cyber60-2026-2027/
Thank you @FortuneMagazine @AWS @lightspeedvp
Been on this bandwagon since 2023. An ai agent with access to same tools as an employee, is more dangerous than an employee.
In a single year, AI has rewritten the security priority list for CISOs.
Attackers are moving faster. Bain estimates AI compresses a typical cyberattack from about four weeks to about 18 hours, and models keep getting better at finding and exploiting weaknesses.
There's also more to protect, with employees shipping apps they couldn't have built a year ago and agents getting access to source code, documents, and production systems.
In a survey of 100 CISOs at companies with 1,000+ employees, all seven of the most-selected 2027 priorities involve AI.
The biggest jumps since 2026:
- Internal AI agent security (+28 pts)
- AI SOC (+26 pts)
- AI offensive security (+24 pts)
- AI code security (+23 pts)
- AI vulnerability remediation (+22 pts)
Last year's staples:
- Exposure & vulnerability management (-21 pts)
- SIEM / security data (-18 pts)
- Privileged access management (-18 pts)
From a16z's @OwenColby and @steph_zhang on The New Security Agenda: a16z.news/p/the-new-security…
Okay apple is gone crazy so there is MacBook Pro and MacBook Pro-er?
Both can have M5 pro and max? But only one comes with the glow on the back 😂