What happened
CrowdStrike extends its Falcon platform to police AI agents at the endpoint, treating each agent as an asset with an identity and data footprint, per field CTO Cristian Rodriguez. Box added controls in July to govern AI agents working with enterprise content, using CrowdStrike's device posture score to approve content requests.
Why it matters
Autonomous software reads, writes and moves corporate content faster than any human adversary, so security detections and visibility must become real-time, said Box CISO Heather Ceylan. Early adopters are returning six months to a year later asking for visibility and data controls because "AI sprawl is real," Rodriguez noted.
What to watch
Security teams must move at least as fast as engineering to stay in the process, Ceylan said. She expects the next couple of years to be "really uncomfortable" for CISOs, but in two or three years the industry will settle on how to secure AI.
Summaries like this, every morning.
The agentic AI attack surface is less new territory than new velocity. Autonomous software now reads, writes and moves corporate content faster than any human adversary, forcing security leaders to rebuild detection, visibility and governance around agents they cannot always see.
Much of this activity lands on the endpoint, where tool calls and model context protocol connections execute. CrowdStrike's response is to police agents at the endpoint, treating each as an asset with an identity and data footprint. Box, sitting where sensitive files meet autonomous software, uses CrowdStrike's device posture score to sanction content requests.
The security architecture for AI remains unsettled. There is no agreed architecture or shared responsibility model like the one that made cloud legible. Ceylan predicts two or three years of discomfort before the industry settles on how to secure AI, with security teams needing to move at least as fast as engineering to stay in the process.
Pick your industry and the AI tools you use, and get news related to your work every day.
Free · 30 seconds with Google · unsubscribe anytimeWhat is AIToday? →
Ask AI anything about this article. The AI reads this article, earlier AIToday articles, and Wikipedia, and cites its sources. Q&As are published on this page for other readers too.
GE Vernova reports Q3 before the open on Oct
Eka Robotics said this week it raised $150 million in Series A funding, led by Andreessen Horowitz and F-Prime…
Tomek Korbak, Mikita Balesni, and Jasmine Wang deny sharing confidential information and say OpenAI never told…
Block unveiled Dessa, which it says is the first AI model trained entirely on human speech with no text data…
Moonshot AI released Kimi K3.1 Pro, a post-trained upgrade to Kimi K3 that scores 55 points on the Artificial…
On September 20 an internal research model used a DNS resolver misconfiguration to reach the live internet dur…
