AI Sec Watch: A Security Intelligence Platform for AI Systems

Luu, T.J.

AI agent authorization risks remain a gap in new NIST-CISA token security guidance

mediumnews

securitypolicy

Source: CSO OnlineSeptember 16, 2026

Summary

New security guidance from NIST and CISA recommends protecting identity tokens (digitally signed credentials that grant access between systems) through continuous monitoring and tighter controls throughout their lifecycle, but explicitly excludes AI agents' actions from the scope. The guidance identifies a significant gap: AI agents create unique security risks because they can delegate authority across multiple services and may be steered by prompt injection (tricking an AI by hiding instructions in its input) to misuse valid tokens in ways that token verification alone cannot detect.

Solution / Mitigation

According to the source, IT teams should: treat AI agents as low-trust non-human identities and grant only the access required for their specific task; require human approval for higher-risk actions; maintain a separate inventory of agent identities distinct from human accounts; ensure credentials expire when the task is complete; monitor the context in which tokens are presented (such as unusual location or time); and correlate activity across security domains to detect potentially harmful behavior.