Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

One of the jobs of the National Institute of Standards and Technology is to keep on top of new technologies as they are developed and evolve. This is particularly important for risk management, considering both of the major governmental information security frameworks (FedRAMP and CMMC) are based on NIST publications. Well, as you might imagine, Artificial Intelligence technology is a huge new risk factor.

Passkeys and security keys both support phishing-resistant authentication, but they differ in how credentials are stored, managed, and used. A passkey is a digital authentication credential, while a security key is a physical authenticator that can store credentials and prove a user's identity. For enterprises replacing passwords, the distinction affects credential portability, recovery, hardware requirements, and control over authentication.

AI is changing from a tool that generates content into agents that reason, decide, and take autonomous action. Employees now use AI assistants in their browsers and desktop apps. Developers run coding agents that read files and execute commands on their machines. Business teams build agents and connect them to enterprise data through Model Context Protocol (MCP) servers. This shift from asking AI to tasking AI creates hard questions for security teams: Which AI agents are operating in the environment?