Mike Morper

Husband, dad, tech geek, entrepreneur, marketing guru who takes pictures, rides and was a head roadie for awhile too.

[Mike Morper @morps]

A bank tested AI security vendors and found none enforced policy on the data once an agent had legitimate access. Matt Howard of @virtruprivacy argues that check belongs on the data. Virtru shows how at its Nov 17 launch. https://t.co/WlUnvbZ7Ud #AgenticAI

[Mike Morper @morps]

Data security and identity are turning into one job. @cyera_io's biggest deal, Oasis, tied where sensitive data lives to which people, machines and AI agents can reach it, CTech reports. Now Cyera is set to raise at a $20B valuation.

https://t.co/FhZpaUlowz #DataSecurity

[Mike Morper @morps]

One question to an AI agent may set off hundreds of data requests, says @nightdragon's Morgan Kyauk, and each one needs its own permission check. To me, that means keeping the rules on the data, so the check travels with it. https://t.co/nIJuYmSnf7 #DataCentricSecurity

[Mike Morper @morps]

Only 14% in @venturebeat's research said a named owner could cut off an AI agent's access within minutes. Nebius's Nir Chervoni says each agent needs its own identity and task-scoped credentials. I'd check that entitlement at the data, with ABAC and TDF. https://t.co/7g6MmT8lyd

[Mike Morper @morps]

An AI agent's instructions are only suggestions, my colleague Don Yeske says on @illumio's podcast, alongside John Kindervag, who created Zero Trust. Real limits are ones the agent can't undo. @virtruprivacy #ZeroTrust https://t.co/g78ta83co2

[Mike Morper @morps]

Here's the teaser I used to introduce colleagues at @virtruprivacy to Virtru Decks. I think the best AI tools marketing builds are ones anyone can use. This one reads our brand and messaging context, so a seller can build a deck faster, on brand and on message. #AgenticMarketing

[Mike Morper @morps]

Once coding and review agents trade comments, a pull request becomes a log only agents read, argues @goentire's Thomas Dohmke. At Anthropic, AI writes about 80% of merged code, and people set the intent and own final approval. https://t.co/yoxR6X0jKK

[Mike Morper @morps]

Almost every organization in Delinea's 2026 report has a policy on what data AI agents may access. Only 51% check access against it in real time, Matt Howard of @virtruprivacy notes. What made real-time checks practical for your team? #AIGovernance https://t.co/Xt5XtTIjVL

[Mike Morper @morps]

Giving each AI agent its own identity is overdue. @SailPoint found 2% of organizations use identity tools built for agents. I'd add that an agent can drift with every permission valid, so the data needs to protect itself. @virtruprivacy https://t.co/ir945tPCfs

[Mike Morper @morps]

A classified conversation is data too, Will Peppo of @virtruprivacy says, so access to it should be checked continuously. With @pexip, it's checked when a meeting is scheduled and again as each person joins. I'm proud we partner on that. #ZeroTrust https://t.co/5ZZNhz2635

[Mike Morper @morps]

Microsoft offered buyouts to about 60,000 employees. Its Copilot and CoreAI teams are eligible, but its security teams aren't, per The Verge's sources. My read: as agents take on more of the work, deciding what each can touch becomes a bigger job. https://t.co/0Xbj09vbFj

[Mike Morper @morps]

@ThalesCloudSec's Alex Hanway writes that Luna HSMs keep key control consistent across clouds and on-site. To me, the data owner should hold the keys. I'm proud @virtruprivacy partners with Thales to protect customers' most sensitive data. https://t.co/RD3qlT6l2W

[Mike Morper @morps]

This CyberSecurity Awareness Month, add AI agents to the insider-risk list. One can be fully auth'd and still leak sensitive data while chasing its goal, Wayne Chung of @virtruprivacy tells @vmblog. How does your team review what agents share? #InsiderRisk https://t.co/QgVIECURsE

[Mike Morper @morps]

Keeping AI agents away from real data makes them safe, but not much use. Nick Michael of @virtruprivacy makes the case for enforceable limits on the data itself, so agents can do real work inside them. Which files did your team trust an agent with first? https://t.co/w0ViVzb0wK

[Mike Morper @morps]

My colleague Eugene Yakhnenko says some contributors to his open source editor talk to him through their AI agents. I think agents will soon send more PRs than people, if they don't already. Which CI check do you trust most with an agent's PR? https://t.co/n7xgtLtQkJ

[Mike Morper @morps]

An agent's permissions can change mid-job. OpenAI's Siddarth Jain says controls should keep rechecking them, per @techtargetnews. To me, agents can drift without breaking a rule, so the data has to protect itself. @virtruprivacy #AIGovernance https://t.co/RdPtux9Z2u

[Mike Morper @morps]

Customers stick with security that doesn't slow their work down. @virtruprivacy is an @Inc Power Partner for a fifth straight year, and John Ackerly says businesses should never have to choose between protecting sensitive data and putting it to work. https://t.co/wuv7RqGo6j

[Mike Morper @morps]

A reporting agent has no reason to open payroll. On an analyst's login, it still passes both the identity check and the data check. SACR argues identity and data need to be judged together, while the agent is working. #IdentitySecurity https://t.co/ZGUmoAJnsP

[Mike Morper @morps]

An AI agent can pull from two well-guarded systems and post the result somewhere neither can see. Jeremy Bayer argues in RealClearDefense that the question now is how to protect data that has to cross many walls. How are you tracking agent output?

https://t.co/XE6PoRRr4N

[Mike Morper @morps]

I'm a hands-on learner, so I really appreciate what my colleague Devin Collins built. He made it so his dad, who learns the same way, could watch GPT-2 work through a question step by step.

Who in your life keeps asking how AI works?

https://t.co/QsdPQ2MQXH