Logo
Cybersecurity

AI Agents Change What Security Teams Need to Know

An AI system that recommends an action creates one kind of risk. An AI system that can execute it changes the job.

ITSEC AsiaITSEC Asia
|
Sep 18, 2026
AI Agents Change What Security Teams Need to Know

NIST is building an AI agent workflow for one of cybersecurity’s most widely used public resources.

On 17 September, its Information Technology Laboratory presented work on an agentic workflow designed to help enrich vulnerability information in the National Vulnerability Database. NIST says the project is intended to help the NVD cope with the increasing scale and complexity of disclosed vulnerabilities, and the webinar covered its architecture, implementation issues and early results.

The project illustrates a broader change.

AI is moving from producing information toward performing multi-step tasks. NIST describes AI agents as systems capable of autonomous actions that can interact with external systems and internal data.

For cybersecurity professionals, that means another layer of skills is arriving.

Security Has to Follow the Action

A conventional AI application might receive a prompt and return an answer. An agent may have access to tools, data and permissions that allow it to continue working.

That changes the questions a security professional needs to ask.

  • What systems can the agent access?
  • Which actions can it perform without approval?
  • What identity and permissions does it use?
  • How is sensitive context stored between tasks?
  • Can an untrusted input alter what the agent does next?
  • What evidence is recorded when the agent takes an action?
  • Where should a human be required to intervene?

ITU’s September workshop on secure agentic AI focused on precisely this territory. Its agenda covered security and trust challenges, risk management mechanisms, security frameworks and trustworthy evaluation methods for agentic systems.

The security boundary is no longer simply around a model. It can stretch across the entire chain of actions the model is allowed to initiate.

AI Security Needs People Who Understand Workflows

That creates an interesting workforce problem.

Someone testing an agentic system needs enough AI knowledge to understand how the agent reasons and uses context, but also familiar cybersecurity skills around identity, access control, application security, data protection, logging and testing.

They also need to think in sequences.

Suppose an agent reads an email, retrieves a document, updates an internal system and sends a response. Each individual action may be permitted. The combination can still create risk.

A useful security assessment therefore needs to examine what the agent can do across the full workflow, including what happens when instructions conflict or information from one step contaminates the next.

The red team question becomes less “Can I make the model say something strange?” and more “Can I make this system do something it shouldn’t?”

That’s a considerably more interesting afternoon.

Train Against the Workflow

Agentic AI security lends itself to practical training.

Give learners a simulated agent connected to several tools. Let them map its permissions, inspect the data it can reach and test what happens when it receives misleading instructions. Then ask them to design controls without making the system useless.

The exercise combines AI understanding with familiar cybersecurity judgment.

That kind of hands-on work fits naturally with ITSEC Cyber & AI Academy, where cybersecurity and AI skills can be practised together through scenarios that reflect how systems are actually deployed and operated.

Organizations won’t need every cybersecurity professional to become an AI researcher.

They will need people who can look at an autonomous workflow and know where to ask uncomfortable questions.

Explore practical cybersecurity and AI training at ITSEC Cyber & AI Academy.

References: NIST: AI Agent Enrichment Workflow at the National Vulnerability Database, 17 September 2026 · ITU: Advancing Standardization for Secure Agentic AI, 7 September 2026 · NIST: AI Agent Standards Initiative

Share this post

You may also like

What Is Continuous Security Validation and Why Does It Matter?
Cybersecurity

What Is Continuous Security Validation and Why Does It Matter?

Cyber threats evolve continuously. New vulnerabilities are discovered every day. Cloud environments change rapidly. Applications are updated frequently. Employees adopt new technologies and attackers constantly search for opportunities to exploit weaknesses. Yet many organizations still rely on periodic security assessments conducted once or twice a year. The challenge is simple: risk does not wait for the next penetration test. This is why more organizations are embracing Continuous Security Validation (CSV) as part of a modern cybersecurity strategy. WHAT IS CONTINUOUS SECURITY VALIDATION? Continuous Security Validation is the practice of continuously evaluating and validating an organization's security posture as environments, threats and attack surfaces evolve. Instead of providing a snapshot at a single point in time, Continuous Security Validation delivers ongoing visibility into security weaknesses and control effectiveness. Its purpose is to answer a critical question: "Are our defenses still working today?" Rather than waiting months between assessments, organizations gain a more dynamic understanding of their exposure. WHY TRADITIONAL ASSESSMENTS ARE NO LONGER ENOUGH Traditional penetration testing remains an important component of cybersecurity. However, most assessments are performed

ITSEC AsiaITSEC Asia
|
Jun 15, 2026 — 4 minutes read
Cybersecurity Network in the Age of AI: Building Resilient, Zero Trust Enterprise Architectures
Cybersecurity

Cybersecurity Network in the Age of AI: Building Resilient, Zero Trust Enterprise Architectures

Artificial intelligence is accelerating digital transformation across industries but it is also accelerating cyber threats. From AI-assisted phishing to automated vulnerability scanning, adversaries are operating faster and more intelligently than ever. In this environment, the cybersecurity network is no longer just an IT safeguard, it is a strategic business asset. According to industry trends, attackers increasingly exploit identity gaps, cloud misconfigurations, and east-west network traffic rather than relying solely on perimeter breaches. For CISOs, CTOs, and enterprise decision-makers, this shift demands a redefinition of how cybersecurity networks are designed, governed, and optimized. The question is no longer whether your network is protected. It is whether your architecture is resilient, adaptive, and aligned with business risk. WHAT IS A CYBERSECURITY NETWORK? A cybersecurity network refers to the integrated framework of technologies, controls, policies, and monitoring capabilities that protect an organization’s digital infrastructure from unauthorized access, disruption, and data compromise. In enterprise environments, it spans: * On-premises infrastructure * Hybrid cloud security environments * Multi-cloud deployments * SaaS platforms * Remote workforce connectivity *

ITSEC AsiaITSEC Asia
|
Feb 20, 2026 — 6 minutes read
The Next Cyber Skills Gap May Be Hidden in Your Encryption
Cybersecurity

The Next Cyber Skills Gap May Be Hidden in Your Encryption

Quantum computing has a talent problem hiding inside a technology problem. The discussion around post quantum cryptography often starts with algorithms. NIST has already standardized the first post quantum algorithms and continues to update technical standards. In June, it released working drafts for bringing post quantum cryptography into Personal Identity Verification credentials, including a model that supports gradual migration from classical cryptography. NIST also finalized updated crypto agility guidance on 29 June. The concept is straightforward: organizations need the ability to replace cryptographic algorithms and implementations without causing major disruption. Doing that requires people who understand considerably more than the names of new algorithms. FIRST, FIND THE CRYPTOGRAPHY Ask an organization where it uses encryption and the first answers may be predictable: VPNs, databases, certificates and websites. Keep looking and the list grows. Cryptography can be embedded in applications, APIs, identity systems, cloud services, hardware, third party software, backups, digital signatures and old systems that everyone politely avoids touching. Preparing for a cryptographic transition therefore requires capabilities such as: * Discovering where cryptographic algorithms,

ITSEC AsiaITSEC Asia
|
Sep 11, 2026 — 3 minutes read

Receive weekly
updates on new posts

Subscribe