Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

The enterprise AI crisis: Unsanctioned tools and unenforced policies

Unsanctioned AI tools. Patchy access controls. Unmanaged apps and devices. And of course, compromised credentials. These are the issues revealed in the 1Password Annual Report 2025: The Access-Trust Gap. The report is based on a survey of over 5,000 knowledge workers, IT and security professionals, and CISOs, and it captures a moment of profound technological and cultural transition.

An Identity Security taxonomy for Agentic AI

Agentic AI is a fundamentally new paradigm. AI agents can interact with various tools and act dynamically and probabilistically as they encounter new inputs. That means they end up falling somewhere between an application and a user in terms of how they operate. Indeed, the interaction with other applications is what gives agentic AI its power; however, this also has implications for identity security and access management.

Introducing new .env file support in 1Password environments

The new.env destination in 1Password environments makes it easy for developers to use and collaborate on.env files securely, right from the desktop app. 1Password environments provide a secure workspace to store, organize, and manage project secrets – the same credentials you would normally handle as environment variables. Each environment acts as a dedicated space for a project or app, helping teams manage and maintain consistent credentials.

Securing The Win Episode Two: Mark Hazelton

In this episode of Securing the Win, Oracle Red Bull Racing’s Chief Security Officer Mark Hazelton joins Calum Nicholas to reveal how the team protects its most valuable asset — data. From espionage scandals to modern cyber threats, Hazelton shares how F1’s fastest team stays secure in a digital world where every millisecond — and every password — counts.

Securing The Win Episode One: Laurent Mekies

What does it take to lead one of the world’s most competitive teams, mid-season? In Episode 1 of Securing the Win, Oracle Red Bull Racing Team Principal Laurent Mekies joins host Calum Nicholas to discuss how trust, culture, and structure keep the team performing under pressure. It’s a masterclass in leading through change, and a reminder that in both cybersecurity and racing, people are your ultimate competitive edge.

1Password Presents: Securing the Win

Buckle up. We’re taking you inside a world where speed meets security We teamed up with Motorsport to bring the Oracle Red Bull Racing story to life in Securing the Win – the first-of-its-kind docuseries exploring how performance, precision, and security come together behind one of the world’s most advanced teams. Hosted by former F1 technician Calum Nicholas, the series takes you inside the high-pressure world of racing. Each episode uncovers lessons every security leader can relate to: trust under pressure, resilience through change, and speed without compromise.

Securing AI agent access to credentials: the making of 1Password Secure Agentic Autofill

Enabling AI agents to securely use credentials in a browser is a challenging problem to solve. In this video, 1Password Head of Ecosystems and Partnerships Dennis Kromhout van der Meer discusses these challenges and the steps 1Password took to ensure that agents and LLMs never have access to your credentials when using Secure Remote Autofill.

Closing the credential risk gap for AI agents using a browser

AI agents increasingly are completing real tasks in the browser, acting on behalf of employees, and connecting to the same systems humans rely on to get work done. This introduces a new security problem: AI agents require credentials – passwords, API keys, and one-time codes – to operate. As agents proliferate, the risk surface increases and it brings a variety of identity and access management challenges.

Microsoft and Dropbox password managers are sunsetting: What it means and what to do next

Your password manager might be closing up shop, putting your digital security at risk. In recent months, two major tech players – Dropbox and Microsoft – have discontinued their built-in password manager features. If you’ve been relying on Microsoft Authenticator or Dropbox Password, it’s now time to decide how you’ll protect your accounts going forward.