Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk. (Nadir Izrael)

Point-in-time audits and sampled assessments offer only snapshots; continuous control monitoring provides evidence that security controls are working today. (Sravish Sridhar)

Every leaked credential should be dead, or dying, within sixty seconds of being found. Here's a proposal to make that the default. (Matt Honea)

Security teams must treat autonomous agents as highly privileged identities. (Etay Maor)

For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality. (Danelle Au)