<![CDATA[AI Agents are not programs.]]>AI Agents are not programs. They are digital workers.

Discuss amongst yourselves.

Link Preview Image
AI Agents Are Already Working for You. Who’s Managing Them?

Tweet AI Agents Are Not Applications. They Are Digital Workers. Most organizations are adopting AI agents faster than they are learning how to govern them. That is the problem. A chatbot that answers questions is one thing. An AI agent … Continue reading →

favicon

MSI :: State of Security (stateofsecurity.com)

]]>https://board.circlewithadot.net/topic/686583b8-843a-4039-9979-3f69c5499969/ai-agents-are-not-programs.RSS for NodeFri, 15 May 2026 02:55:20 GMTTue, 12 May 2026 03:48:38 GMT60<![CDATA[Reply to AI Agents are not programs. on Tue, 12 May 2026 14:32:40 GMT]]>@mttaggart @badsamurai @cR0w I think Michael's analysis is pretty much spot on. What Brent is trying to get people that are suffering from some AI psychosis to think about is the fact that digital identity is a real thing, and folks should take advantage of the control that they do have. I can say from my experience that a lot of developers just run their agents under their privilege, which is obviously a mistake.

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/Sempf/statuses/116562091063839342https://board.circlewithadot.net/post/https://infosec.exchange/users/Sempf/statuses/116562091063839342Tue, 12 May 2026 14:32:40 GMT<![CDATA[Reply to AI Agents are not programs. on Tue, 12 May 2026 14:21:06 GMT]]>@mttaggart @badsamurai @cR0w DR;HTLUAW

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/Sempf/statuses/116562045606806345https://board.circlewithadot.net/post/https://infosec.exchange/users/Sempf/statuses/116562045606806345Tue, 12 May 2026 14:21:06 GMT<![CDATA[Reply to AI Agents are not programs. on Tue, 12 May 2026 13:51:37 GMT]]>@badsamurai @Sempf @cR0w In full fairness, I believe the author writes that they should be handled "like" digital workers, but I agree that the term is inapposite.

The governance issue is real though. Agents running amok as a proxy for their operators is a disaster waiting to happen. Scoping their access is an identity problem. Think of it like a Chaos Service Account. I'm charitably suggesting that's the point here.

I've not read the whole book, but I hope there's a section regarding a standard to determine when the risks and costs outweigh potential benefits. Nobody seems to want to admit that most of the time, pulling the plug is the correct business decision.

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/mttaggart/statuses/116561929640796894https://board.circlewithadot.net/post/https://infosec.exchange/users/mttaggart/statuses/116561929640796894Tue, 12 May 2026 13:51:37 GMT<![CDATA[Reply to AI Agents are not programs. on Tue, 12 May 2026 12:57:26 GMT]]>@Sempf @cR0w I know plenty of incredibly smart and talented people that I’m now genuinely concerned with their interactions and takes from AI; I wish it was just some slop projects and their family photo as Studio Ghibli.

The author starts ok with calling for better governance and ownership. But calling AI agents digital workers is offensive and not a pathway to governance.

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/badsamurai/statuses/116561716610359871https://board.circlewithadot.net/post/https://infosec.exchange/users/badsamurai/statuses/116561716610359871Tue, 12 May 2026 12:57:26 GMT<![CDATA[Reply to AI Agents are not programs. on Tue, 12 May 2026 12:43:44 GMT]]>@badsamurai @cR0w I understand, but you should know I have known Brent for 30 years, and he is an order of magnitude smarter than you and I put together. Why is he writing about this? Because people are using it. You and me and everyone else can have all the bad attitude we want, and be able to point at the smoking wreckage in two years and say "I told you so!" or we can work to mitigate the damage. I choose the latter.

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/Sempf/statuses/116561662719144998https://board.circlewithadot.net/post/https://infosec.exchange/users/Sempf/statuses/116561662719144998Tue, 12 May 2026 12:43:44 GMT<![CDATA[Reply to AI Agents are not programs. on Tue, 12 May 2026 12:10:04 GMT]]>@cR0w @Sempf couldn’t make it more than 2 pages. This is the stuff you see from people with a level of AI psychosis.

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/badsamurai/statuses/116561530371212627https://board.circlewithadot.net/post/https://infosec.exchange/users/badsamurai/statuses/116561530371212627Tue, 12 May 2026 12:10:04 GMT<![CDATA[Reply to AI Agents are not programs. on Tue, 12 May 2026 11:05:56 GMT]]>@cR0w Aww come on.

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/Sempf/statuses/116561278169759064https://board.circlewithadot.net/post/https://infosec.exchange/users/Sempf/statuses/116561278169759064Tue, 12 May 2026 11:05:56 GMT<![CDATA[Reply to AI Agents are not programs. on Tue, 12 May 2026 04:15:03 GMT]]>@Sempf Improvement over time... Certainly not yet. But maybe in a bit. It's a wild ride and I'm not sure any of us can afford a ricket.

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/popio/statuses/116559662484061277https://board.circlewithadot.net/post/https://infosec.exchange/users/popio/statuses/116559662484061277Tue, 12 May 2026 04:15:03 GMT<![CDATA[Reply to AI Agents are not programs. on Tue, 12 May 2026 03:50:09 GMT]]>@Sempf no

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/cR0w/statuses/116559564635369457https://board.circlewithadot.net/post/https://infosec.exchange/users/cR0w/statuses/116559564635369457Tue, 12 May 2026 03:50:09 GMT