IT Brew

August marks the end of summer—and it was a quiet month overall for the C-suite, which nonetheless had its share of comings and goings. Antoine McCord, DHS CIO, leaves agency After a year-and-a-half stint in charge of cybersecurity at DHS, CIO Antoine McCord has left the agency. A hire at the beginning of the second Trump administration, McCord’s professional background includes time in the Marine Corps and over two years working for military tech contractor Anduril.

Your AI strategy has a security problem: 43% of IT leaders now cite security concerns as the top barrier to expanding AI agent deployment, according to research from JumpCloud. Before giving agents more access to apps, data, and workflows, make sure you can govern the identities behind them. See how to secure every identity, human or not. For many employees, cybersecurity training is a quarterly video warning them not to click on mysterious links.

Rogue AI agents are attracting a lot of buzz within the cybersecurity and IT communities after a few high-profile incidents, but experts suggest that more stringent oversight of security controls can help organizations face down their agentic fears.

Your AI strategy has a security problem: 43% of IT leaders now cite security concerns as the top barrier to expanding AI agent deployment, according to research from JumpCloud. Before giving agents more access to apps, data, and workflows, make sure you can govern the identities behind them. See how to secure every identity, human or not. Winter is coming…and by “winter,” we mean AI-enabled cyberattacks and other highly advanced agentic threats.

Today’s generation of software-building, stack-maintaining IT pros regularly leverage their extensive expertise and problem-solving abilities. You don’t acquire that kind of knowledge overnight. Christine Cunningham, chief curriculum and learning officer at Boston’s Museum of Science, wants to start building young engineers’ analytical acumen as early as preschool—and with materials as high-tech as puppets and pom-poms.

Your AI strategy has a security problem: 43% of IT leaders now cite security concerns as the top barrier to expanding AI agent deployment, according to research from JumpCloud. Before giving agents more access to apps, data, and workflows, make sure you can govern the identities behind them. See how to secure every identity, human or not.

Like the cookie tin that now houses sewing supplies at Nana’s house, most enterprises are witnessing agents do things outside of their original purpose. According to an August report from Enterprise Management Associates for Cequence Security, 65% of companies said they’ve had an AI agent perform actions outside of its intended scope. Of those companies, 29.2% said these occurrences had a measurable impact (e.g., data exposure, financial loss, etc.) on their business.

Nobody likes writing a runbook, according to Todd Thorsen, CISO at data resilience and protection platform CrashPlan. While runbooks’ standardized instructions for go-to IT problems can prove helpful for both new hires and on-call team members, producing these guides is “extra added overhead,” Thorsen said. An IT pro has enough going on without spending hours laying out the directions for hardening a Ubuntu server or troubleshooting API latency with a payment platform.

It happens to Bournes, Bonds, and bots alike: Eventually, some agents need to retire. Professional services firm KPMG’s Q2 2026 numbers reveal that, among more than 200 senior business leaders at US companies with annual revenue of $1 billion or more, AI agents have a 53% adoption rate. That’s a solid rate for deployment—but what happens if a company wants to un-deploy one, two, or even all of them?

As a web developer, you might be tasked with setting up a temporary website for a company event. But when the website’s no longer needed, what happens if you lose track of the domain? If a company somehow misses the warning emails to renew, the domain will be rereleased to the public, where anyone can register it—opening the door to “dropcatch attacks,” or malicious actors who use the domain to redirect users to scams and malware.