AgentDNA is live now!
The first unified trust layer for multi agent systems, built on ultra scalable DAG of @RubixChain.
https://t.co/qyRB4oj3jV
Why AgentDNA?
1. Auth: Current static auth systems built for humans/static APIs dont work for Agents. AgentDNA introduces dynamic DIDs
Running Linux servers on the open web without hardened, airgapped credential and SSH key management is a big risk now. SSH keys hardened by a solution like @ThinC_AUTH and #XID would help to mititgate risks significantly. @EnsurityTech
All bank admin accounts need to harden and air gap access immediately. Including for SSH and session keys. @EnsurityTech#XID and @ThinC_AUTH will help mitigate significantly.
Agree. As a first but perhaps the most importent step, banks must harden and airgap access for their workforce as well as users with a 360° passwordless aith that protects SSH, API and session keys too. @ftlive@FT@EnsurityTech@ThinC_AUTH#XID
Several banks around the world reporting failures in access to inter bank transfer systems leading to customer account drainage. Banks must harden and airgap their core banking and inter bank transfer access systems asap. @EnsurityTech@ThinC_AUTH#XID#AuthAMS
Customers controlling access to their accounts with hardend and air gapped access with @ThinC_AUTH and #XID should be allowed to let their agents access banking systems. @Agent_DNA
More than a quarter of people doing shopping with #Muse - that seems big for a month old app. If this share sustains with larger penetration to be seen, but agentic commerce appears a real deal. Need to fix agentic security though at first!
Agree, banks have a big fraud and liability issue to address. Some big unanswered questions:
1. If the user denies the agent action, how does bank prove the user did give consent.
2. How does the bank prove user gave the credential willingly and not misused by the agent.
3. Is the agent a legitimate rep of the user or a hacker who stole credentials
4. Is the intended action approved by the user even if credential shared. How is the intent verified dynamically?
5. Agents by design would like to have the broadest intent (even users may be ok), but how does bank enforce explicit auth from user when it wants.
6. Did the agent create sub agents to act ?
7. Is the agent prompted to do a malicious activity.
Even as banks are trying to deal with agentic actions, AI is making passwords and biometrics themselves highly risky. We need to ensure the hardened user root of trust (eliminate passwords) to pass onto agents and enforce continuous auth. And treat agentic actions as not simple key or x406 certain based auth, but derived from continuous DNA. KYA and KYH will need to replace KYC.
Anecdotal reports of similar losses at multiple banks in the recent weeks - does not look isolated to Central Bank. This theft seems to be breach of core banking access controls at the bank end. Banks must immediately assess their core banking access controls and shift away from password/OTP/api key based legacy systems. @EnsurityTech
Agents appearing to act beyond users instructions is not itself a breach. It is just that tools dont exist to bind agents to users for limited scope. We have been building control mechanisms with @Agent_DNA. However, since agents like #Muse have access to API keys and passwords of users, hackers can steal them to attack banks. This is a real and big risk.
Agents are currently using users credentials and API keys to access. This must stop. Agents cant use users credentials, they must have own ID and get scoped auth permissions from users. @Agent_DNA Chain of Custody Auth ensures agents cant have sweeping permissions.
It is 2026 and we are still seeing breaches due to credential theft and passwords, with wide blast surface. Two choices: harden/airgap creds. Or decentralize creds. Little time left to make this transition.
@EnsurityTech@ThinC_AUTH#AuthAMS@Agent_DNA
official now: anthropic is preparing the release of their new model(s). Via The Information
Anthropic is reportedly preparing a model that, when asked to fix one bug, can identify the broader class of problems behind it and ask whether it should address those too. That account comes from one anonymous tester; the model family and release date remain unclear.
But looks like it will be a significant jump compared to their released models.
BREAKING: AI Agents attacked critical Infrastructure of various India-based entities.
As AI Agents take over the internet, the necessity of putting effective guardrails in front of mission critical resources is paramount.
This is what we have been building with @Agent_DNA
Learn more: https://t.co/0Q0DNyrlaf
Read the news: https://t.co/1hdJlU2fa8
We have not sorted security gaps in the pre agent era fully yet, and now with agents, its a fully different thing altogether. Build agenetic security architecture from first principles @Agent_DNA
I have been warning that the agentic attack sprawl is highky underestimated. It is safe to assume every org will be breached.
1. The first and best line of defense is to harden and airgap credentials. Agents will do damage only if they get hold of creds abd keys. @ThinC_AUTH
2. We need an open and decentralized graph system to dynamically track agentic swarms. @Agent_DNA
@dwebchap@RubixChain One global sequencer never was going to scale and run any real world application. Graph on the other hand makes immense technical sense, esp with agents @RubixChain@Agent_DNA
High time we fix the massive identity security debt built over decades. Majority of these agent driven breaches use weak credential defenses. As for agents themselves, we need a whole new system for control.
@EnsurityTech@ThinC_AUTH@Agent_DNA#AIsecurity#IAM