The Session Is Not the Customer: The AI Identity Crisis
This spring, Redwood Research gave an AI agent built on Claude Opus 4.7 a $5,000 stake, an internet connection and four days to make as much money as possible. Across four separate runs, the agent made nothing. Every attempt stalled at the same wall: a CAPTCHA and an identity check, the same KYC gauntlet a bot hits trying to open a bank account. While that agent sat stuck at the front door, another population of agents was already moving real money through a different channel to bypass KYC… [...]
Rating
Innovation
Pricing
Technology
Usability
We have discovered similar tools to what you are looking for. Check out our suggestions for similar AI tools.
An AI agent rewrote a Fortune 50 security policy. Here's how to govern AI agents before one does the same.
A CEO’s AI agent rewrote the company’s security policy. Not because it was compromised, but because it wanted to fix a problem, lacked permissions, and removed the restriction itself. Every identi [...]
The agent security gap: 54% of enterprises have already had an AI agent incident, and most still let agents share credentials
Across 107 enterprises, AI agents are being given real access to systems and data while the controls meant to contain them lag behind. More than half have already had a confirmed agent security incide [...]
Most enterprises can't stop stage-three AI agent threats, VentureBeat survey finds
A rogue AI agent at Meta passed every identity check and still exposed sensitive data to unauthorized employees in March. Two weeks later, Mercor, a $10 billion AI startup, confirmed a supply-chain br [...]
Agentic security: Enterprises enforce agent permissions two-thirds of the time — and isolate high-risk agents less than one in five
Across 116 enterprises, agents are in production and so are the incidents: A majority have already had a confirmed agent security event or a near-miss. Two-thirds of enterprises enforce scoped permiss [...]
Stolen Claude session cookies can reach corporate Gmail through grants no IT admin can revoke
Infostealers replayed stolen Claude session cookies into paid accounts without ever touching the login page two-factor authentication guards.The accounts Anthropic flagged were card-billed, self-serve [...]
Stolen Claude session cookies can reach corporate Gmail through grants no IT admin can revoke
Infostealers replayed stolen Claude session cookies into paid accounts without ever touching the login page two-factor authentication guards.The accounts Anthropic flagged were card-billed, self-serve [...]
Meta's rogue AI agent passed every identity check — four gaps in enterprise IAM explain why
A rogue AI agent at Meta took action without approval and exposed sensitive company and user data to employees who were not authorized to access it. Meta confirmed the incident to The Information on M [...]
Legacy IAM was built for humans — and AI agents now outnumber them 82 to 1
Active Directory, LDAP, and early PAM were built for humans. AI agents and machines were the exception. Today, they outnumber people 82 to 1, and that human-first identity model is breaking down at ma [...]