Credential leaks continue to happen, even though the controls for human identity have been available for years. Matt Moore, co-founder and CTO of @chainguard_dev, joins @NancyzWang and Dev Tagare to discuss how security changes when credentials belong to people, machines, and AI agents moving through the SDLC. The controls differ, but the standard is the same; credentials should be protected and scoped, and every use should be attributable. ✅ People need MFA, secure credential storage, and SSO where it fits ✅ AI agents need short-lived, least-privilege access ✅ Keep raw secrets out of agent context where possible, and broker access at runtime ✅ Trace actions to the agent and its authorizing human or service The gap sits between what teams know works and what's actually deployed. 🎧Listen to the full conversation here:

Despite leaks in the run-up to her State of the Union Address, Ursula von der Leyen had a few surprises up her sleeve when she addressed the European Parliament. Chief among them, that Canada should become the EU’s fi associate member

Posting fake leaks and watching normies repost them without even understanding what they’re sharing has somehow become an insanely profitable business. I just saw an “AI insider” with posts hitting nearly 1 million views and 400 reposts while spreading some of the fakest information I’ve ever read in my life.

MORGAN STANLEY ACCIDENTALLY LEAKS 100+ DEAL PIPELINE A Morgan Stanley employee mistakenly emailed an internal document detailing more than 100 investment-banking deals being pitched or monitored across Asia and other regions. The list reportedly included potential IPOs, private-equity backers, pension funds and paused projects. Morgan Stanley said it promptly addressed the inadvertent disclosure and is engaging with relevant parties.