<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Zero Trust on carney.wiki</title><link>https://carney.wiki/tags/zero-trust/</link><description>Recent content in Zero Trust on carney.wiki</description><generator>Hugo -- gohugo.io</generator><language>en</language><lastBuildDate>Tue, 10 Feb 2026 00:00:00 +0000</lastBuildDate><atom:link href="https://carney.wiki/tags/zero-trust/index.xml" rel="self" type="application/rss+xml"/><item><title>Your AI Agent Is a Toddler With Root Access</title><link>https://carney.wiki/blog/your-ai-agent-is-a-toddler-with-root-access/</link><pubDate>Tue, 10 Feb 2026 00:00:00 +0000</pubDate><guid>https://carney.wiki/blog/your-ai-agent-is-a-toddler-with-root-access/</guid><description>Agentic AI is no longer a demo.
It calls APIs.
It writes to databases.
It triggers workflows that affect customers, revenue, and operations.
That is powerful.
It is also a fundamental shift in risk.
Once an AI system moves from advisory to execution, it becomes part of the control plane. Whether the organization admits that or not is mostly irrelevant. The risk already changed.
Agents expand the attack surface overnight The moment an AI system can execute actions, it becomes a privileged actor.</description></item></channel></rss>