3 pieces by Nadia Ferreira.
Agents are moving from pilots into daily work, and some are arriving without anyone deciding to deploy them. A practical starting point for governance: an inventory of the access each agent holds and the actions it can take.
A zero-click flaw in a major enterprise assistant showed how an email nobody opens can instruct an AI to send data out. A practical guide to the trust boundaries that retrieval-augmented assistants create, and the controls that hold up.
A new model topped the app stores in a week, and security teams were asked whether employees were using it. Most couldn’t answer quickly. Here’s how to build an AI usage inventory that keeps up.