Applying Zero Trust Principles to Agents - Kieran Human - ASW #397
SC Media, Tuesday, August 25th, 2026
ThreatLocker's Kieran Human explains how sandboxing, least privilege, and monitoring apply to AI agents.
Kieran Human, Lead Cybersecurity Engineer at ThreatLocker, discusses applying established zero trust controls to AI agents on Application Security Weekly.
He describes the properties a good sandbox needs and how monitoring creates a feedback loop that refines allow lists and access controls over time.
The core argument is that an agent's unpredictable behavior is not that different from malware, so the same containment discipline applies.
The segment also covers OWASP's Agentic Skills Top 10, research measuring AI agent exploitation capabilities, and a red agent exploiting a Snowflake vulnerability missed by GitHub Copilot.