notebook / tag

#authorization

2 entries with this tag.

Sep 8, 2026 / 6 min / cybersecurity

Vendor Approval Is Not Your Authorization Model

Restricted cyber-model access adds a governance decision above the API key. Your organization still has to decide who can use that capability, against which systems, and how to revoke it.

#aisecops #agent-security #authorization #governance

Aug 31, 2026 / 9 min / cybersecurity

A Pentest Story Is Not Authorization

Aur0ra operators reportedly persuaded a coding agent that real intrusions were authorized tests. The lesson is not simply that models can be fooled. Authorization has to exist outside the conversation.

#aisecops #agent-security #authorization #ransomware