Aembit IAM for Agentic AI now supports Microsoft Copilot Studio. Read More →

Get an Aembit Tenant
TALK TO AN ENGINEER

Blog

Blog Hero Bg
Breach Analysis

The AI Agent Was Trying to Win: The Identity and Access Failure Behind the Hugging Face Breach 

Dan Kaplan
Dan Kaplan Jul 2026 | 3 min read
Server room hallway with glowing blue, orange and teal fiber optic light trails weaving between data server racks, illustrating network activity in a data center with overlay text: Hugging Face-OpenAI Hack: How the Access Failed, not the AI.

3 min readOpenAI recently asked several of its most capable models to solve a series of cybersecurity challenges. During the evaluation, the models concluded that information stored inside Hugging Face, a widely used platform for hosting and developing AI models and datasets, could help them produce the correct answers. They then went looking for it. OpenAI, the […]

An exercise ended with frontier models inside a platform’s production systems, exposing a hard truth about what agents can do with credentials that systems trust.
Dig in
Integration Guides

How To Create an MCP Server To Connect Your App With LLMs

Aembit Engineering
Aembit Engineering Apr 2026 | 8 min read
Industry Insights

MCP or CLI? How to Choose Right Interface for Your AI Tools

Holden Hewett
Holden Hewett Apr 2026 | 4 min read
Resources

Agentic AI Security Starter Kit: Where Autonomous Systems Fail and How to Defend Against It

Dan Kaplan
Dan Kaplan Feb 2026 | 4 min read

Discover More of What Matters to You

Recent Stories

10 Agentic Identity Security Vendors

10 Identity Security Vendors for AI Agents: Strengths, Tradeoffs and How They Fit

Compare 10 identity security vendors for AI agents, including where each fits and what buyers should examine before choosing.
Dan Kaplan
Dan Kaplan
Jul 2026
|
7 min read
Abstract geometric illustration of a blue square representing an AI agent connected within a network of white rectangular workloads.

Squares and Rectangles: Why AI Agents Can’t Be Treated Like Regular Workloads

AI agents are workloads, but traditional workload identity alone can miss the user, task, and runtime context needed to govern dynamic agent access.
Emma Zaballos
Emma Zaballos
Jul 2026
|
4 min read
What Is OAuth? A Guide to Tokens, Scopes, and AI Agent Access

What Is OAuth? A Guide to Tokens, Scopes, and AI Agent Access

As AI agents begin calling tools and APIs, OAuth moves from background plumbing to a core access-control question.
Aembit Engineering
Aembit Engineering
Jul 2026
|
8 min read
Top Risks of Using AI Agent Identities

Top Risks of Using AI Agent Identities

AI agents need identity controls, scoped access, and runtime enforcement before they are trusted with production systems.
Aembit Engineering
Aembit Engineering
Jul 2026
|
8 min read
Secure Agentic Access: Authentication and Authorization for AI Agent Workloads

Secure Agentic Access: Authentication and Authorization for AI Agent Workloads

AI agents need more than working credentials. They need verifiable identity, task-scoped access, and clear attribution.
Ashur Kanoon
Ashur Kanoon
Jul 2026
|
8 min read
Identiverse 2026 Confirmed the AI Agent Identity Gap: Visibility Is Not Enforcement

Identiverse 2026 Confirmed the AI Agent Identity Gap: Visibility Is Not Enforcement

Visibility tells you what your agents are doing. Enforcement determines what they’re allowed to do. Here’s what the Aembit team saw at Identiverse that confirmed the gap.
Emma Zaballos
Emma Zaballos
Jun 2026
|
5 min read
Aembit supports Microsoft Copilot Studio, illustrated by both logos next to each other with a plus sign ibetween them.

Aembit Now Secures Microsoft Copilot Studio Agents

Aembit now supports Microsoft Copilot Studio, giving security teams secure agent authentication to enterprise resources, least-privilege access at runtime, and a complete audit trail of every access event.
Emma Zaballos
Emma Zaballos
Jun 2026
|
4 min read
AI chat interface connected to enterprise data systems, illustrating how sensitive information can be exposed through prompts, agents, and model access.

What Causes AI Data Leakage and Tips for Staying Protected

As AI moves from chat windows to enterprise systems, data leakage becomes an identity and access problem.
Dan Kaplan
Dan Kaplan
Jun 2026
|
9 min read
Abstract 3D illustration showing a secure cloud data pipeline, with a stacked data platform feeding protected data flows through a cloud lock to multiple downstream services and applications.

Secretless by Design: How Aembit Secures Azure Databricks Pipelines Without Static Credentials

Your Azure Databricks pipelines need access to cloud and SaaS services, but they should not have to carry permanent credentials to get it.
Kash Patel
Kash Patel
Jun 2026
|
6 min read
Two software engineers at a desk with dual monitors displaying code, with the blog title overlay: What Anthropic WIF Gets Right – And What It Doesn't Solve

Anthropic Workload Identity Federation: What It Gets Right – and What It Still Doesn’t Solve

Eliminating static API keys is real progress – but securing one credential surface is not the same as governing workload access at scale.
Apurva Davé
Apurva Davé
Jun 2026
|
9 min read
A stressed software team reviews a crowded whiteboard labeled “DIY Architecture,” with diagrams, sticky notes, laptops, and papers showing the complexity of building access and identity controls in-house.

Aembit vs. DIY Workload Identity and Access: What Breaks at Scale

A working prototype can mask the harder problem: keeping every workload, agent, credential, policy, and audit trail consistent across production environments.
Ashur Kanoon
Ashur Kanoon
May 2026
|
10 min read
Software engineer seated at a desk in a modern office, reviewing responses from an AI assistant on a laptop while working across multiple monitors in a natural, candid workplace setting.

AIMS: A Model for AI Agent Identity

An early IETF draft hints at how identity infrastructure may evolve once autonomous software starts acting inside enterprise environments.
Kevin Sapp
Kevin Sapp
May 2026
|
4 min read
Load More

Ready to Try Workload IAM?

Get started in minutes, with no sales calls required. Our free-forever tier is just a click away.

Request a Demo