Back to Thoughts Stream

Thoughts Directory

Complete chronological index of all 75 entries.

Jump to:October 20263July 20262June 20261April 202618March 202611February 202612January 202628
October 2026
3 entries
#74•2 min read

Treating AI agents as glorified scripts is an enterprise security liability; the Gemini Enterprise Agent Platform forces us to finally treat agents as first-class Non-Human Identities.

GoogleCloudGeminiAgenticAIIdentitySecurityIAM
#73•2 min read

As the Gemini Enterprise Agent Platform shifts workloads from stateless prompting to stateful non-human identities, our IAM models are facing an architectural reckoning.

GoogleCloudIAMIdentitySecurityZeroTrustAgenticAI
#72•2 min read

Google's Agent Gateway shifts agentic security from network perimeters to protocol-layer parsing of MCP and A2A traffic.

GoogleCloudIdentitySecurityAgenticAIZeroTrustIAM
July 2026
2 entries
#71•2 min read

How do we maintain granular authorisation boundaries when our serverless agentic workflows increasingly rely on third-party identity fabrics?

#70•2 min read

Are we finally moving beyond the 'Agentic Hype' phase and into the era of operationalised, sovereign agent deployments?

June 2026
1 entry
#69•3 min read

How does the shift towards persistent, stateful, and autonomous agentic workflows fundamentally change our requirements for perimeter-based security versus identity-centric governance?

April 2026
18 entries
#68•1 min read

If you wouldn’t let ten employees share one login, why are your AI agents sharing a single service account?

#67•1 min read

The news from Google Cloud Next '26 is exciting! Google has introduced the Gemini Enterprise Agent Platform, which provides autonomous AI agents with their own cryptographic identities, a significant step forward in identity security. You can read more about it here: https://lnkd.in/evEyRqWD.

GoogleCloudNextAIIAMIdentitySecurityGoogleCloud
#66•1 min read

Few weeks ago, Google Cloud introduced autonomous AI agents for threat hunting and attack path analysis designed to reduce response times from minutes to seconds.

IdentitySecurityZeroTrustGoogleCloudOktaAI
#65•1 min read

What happens when AI agents outnumber your employees?

IdentitySecurityGoogleCloudOktaAIIAM
#64•1 min read

AI agents aren’t the risk. Unmanaged identity is.

OktaSecuresAI
#63•2 min read

With Okta for AI Agents launching on April 30, our threat models are about to get a big shift, moving from human-speed reconnaissance to machine-speed attacks.

#62•1 min read

The era of GenAI "pilot purgatory" is officially over. The new mandate? Scaling and governing networks of autonomous agents.

GoogleCloudNextGenerativeAICloudComputingSoftwareArchitecture
#61•1 min read

Disclosure from Palo Alto Networks Unit 42 about the "Double Agent" vulnerability affecting Google Cloud's Vertex AI Agent Engine: https://lnkd.in/ehs8_jNm

GoogleCloudVertexAIIAMIdentitySecurityCloudSecurity
#60•1 min read

With breaches showing how quickly attackers can take advantage of forgotten credentials, having a true understanding of what’s inside your environment matters more than ever. Many organisations overlook the scope of non-human identities: API keys, OAuth apps, and automation scripts quietly operating behind the scenes.

#59•1 min read

The more an organisation expands into the cloud, the smaller its IAM perimeter should actually get.

OktaGoogleCloudIdentitySecurityIAMCloudSecurity
#58•1 min read

If your security strategy relies solely on "being inside the VPC," you’re one compromised container away from a total breach.

GoogleCloudCloudRunZeroTrustCyberSecurityServiceMesh
#57•1 min read

Google Cloud Next ’26 is coming up fast in Las Vegas! (April 22-24) 🚀

GoogleCloudNextIAMIdentitySecurityCloudStrategyZeroTrust
#56•1 min read

Interesting forecast from Google Cloud in their "Cybersecurity Forecast 2026": automated, scalable cyberattacks are expected to become the norm.

IdentitySecurityGoogleCloudAIIAMCybersecurity
#55•1 min read

Google Cloud's 2026 forecast highlights AI agents as distinct digital identities, an emerging reality we are already encountering.

IdentitySecurityGoogleCloudOktaAIIAM
#54•2 min read

A question worth asking: if an AI agent deleted 10,000 records at 3 AM, could you confidently identify which permission allowed it and restore that permission to its state from the day before? 🔒

OktaIdentitySecurityZeroTrustAICloudSecurity
#53•2 min read

On April Fools' Day, it’s interesting to look back at one of the earliest known pranks. In 1698, crowds gathered at the Tower of London after hearing about the "washing of the lions." Of course, no lions were actually washed.

IdentitySecurityZeroTrustCloudSecurityPhishingResistantIAM
#52•1 min read

Microsoft's forecast estimates there will be around 1.3 billion AI agents active in enterprises by 2028.

#51•2 min read

With a flood of announcements from Google Cloud, Okta, Wiz, and Rubrik, it's becoming clearer how the layered architecture for securing autonomous agents needs to come together. This is an important topic, especially as Mandiant’s M-Trends 2026 report highlights that the attacker handoff window has shrunk to just 22 seconds.

March 2026
11 entries
#50•2 min read

As AI agents become more autonomous, a critical question emerges: How do you apply Zero Trust to an identity you can’t see?

OktaGoogleCloudIdentitySecurityAIZeroTrust
#49•1 min read

What happens when your workforce includes more than just humans? 💡

OktaIdentitySecurityAICloudSecurityIAM
#48•2 min read

If an AI agent makes a critical decision in your system, who is responsible?

IdentitySecurityAIIAMOktaCyberSecurity
#47•1 min read

Google's acquisition of Wiz, completed on March 11, signals a big change in how multicloud security is approached. For identity teams, the separation between identity security (“who”) and infrastructure posture (“what”) is becoming less distinct. 💡

GoogleCloudWizOktaIdentitySecurityMulticloud
#46•1 min read

Interesting to see the market reflecting a trend we're noticing firsthand.

OktaGoogleCloudIdentitySecurityAIIAM
#45•1 min read

As AI agents move from simple assistants to an autonomous workforce, identity security is facing a new frontier. "Shadow AI" and unmanaged non-human identities are real risks that require a new playbook.

OktaIdentitySecurityAIAgentsCyberSecurityIAM
#44•1 min read

Interesting read on the two actively exploited Chrome zero-days patches (CVE-2026-3909 and CVE-2026-3910).

IdentitySecurityZeroTrustOktaGoogleCloudCybersecurity
#43•2 min read

What happens when your most active 'users' aren't even human?

IdentitySecurityIAMAIGovernanceOktaGoogleCloud
#42•1 min read

AI agents are now some of your busiest “workers”, accessing databases, executing workflows, and making decisions around the clock. But many organizations are deploying them without proper identity controls.

#41•1 min read

For years, achieving true high-availability (HA) between Cloud Run services meant stitching together complex VPC peering or settling for slow DNS failover.

GoogleCloudCloudRunServiceMeshServerlessCloudArchitecture
#40•2 min read

After earning 9 Google Cloud certifications, I’m excited to share a few insights that no exam could ever test.

GoogleCloudCertifiedIdentitySecurityIAMCloudArchitectureOkta
February 2026
12 entries
#39•1 min read

With market pressure on identity vendors, enterprise leaders require Zero Trust implementations that deliver measurable value quickly instead of lengthy programs that struggle to demonstrate ROI.

OktaGoogleCloudIdentitySecurityZeroTrustAutomation
#38•1 min read

Security that only works for the most tech-savvy users falls short of its goal.

IdentitySecurityAccessibilityOktaGoogleCloudIAM
#37•2 min read

After years of industry hype, we are beginning to settle into a clearer understanding of what "Zero Trust" means. This shift translates into practical steps for Google Cloud Platform (GCP) infrastructure beyond the usual buzzwords.

GoogleCloudZeroTrustGKECloudRunIdentitySecurity
#36•1 min read

Non-human identities, such as service accounts, AI agents, and API tokens, now outnumber human users by roughly 10x in many enterprises. This "silent workforce" continues to process data and make API calls even when human activity slows.

IdentitySecurityIAMAIOktaGoogleCloud
#35•1 min read

What happens when your security tools become the backdoor?

ZeroTrustIdentitySecurityOktaGoogleCloudCybersecurity
#34•1 min read

The predictions for 2026 indicate a significant transformation in the cybersecurity landscape due to AI-powered phishing.

IdentitySecurityOktaPhishingResistanceFIDO2WebAuthn
#33•2 min read

Alphabet is set to more than double its capital expenditure to around $175-185 billion in 2026, indicating significant developments ahead for Identity and Access Management.

IdentitySecurityGoogleCloudOktaAIIAM
#32•1 min read

kubectl apply is too powerful. It’s time to gate your GKE cluster. 🛡️🔐

GoogleCloudGKEKubernetesDevSecOpsSupplyChainSecurity
#31•1 min read

Interesting news from Google for anyone frustrated with AI coding assistants suggesting deprecated APIs.

GoogleCloudAIDeveloperToolsIdentitySecurityOkta
#30•1 min read

What fuels real innovation with AI? It starts with a solid identity foundation.

OktaIdentitySecurity
#29•1 min read

This edition covers a breakthrough in Cloud Run cold start performance, the integration of open models directly into BigQuery SQL, and the official launch of the new asia-southeast3 region. Plus, critical updates on Firebase relational support and Service Mesh patching.

ServerlessCloudRunGKEBigQuerySecurity
#28•2 min read

In my work as a technical strategist, I get to bridge two powerful ecosystems: Okta and Google Cloud. It's exciting stuff, but I often see several common gaps when enterprises first integrate them.

OktaGoogleCloudIdentitySecurityWorkloadIdentityFederationSCIM
January 2026
28 entries
#27•1 min read

I’ve been exploring a question with various teams lately: how can you trigger an MFA push notification directly from a line of code?

OktaGoogleCloudIdentitySecurityIAMAI
#26•1 min read

Google Cloud's 2026 Cybersecurity Forecast reveals significant insights into the intertwining of AI, geopolitics, and technology, highlighting the substantial identity implications.

GoogleCloudIdentitySecurityIAMAIOkta
#25•1 min read

Is your MFA truly phishing-resistant? 🔐

OktaFastPassIdentityEnginePasswordlessMFA
#24•1 min read

An AI model developed by Google's DeepMind has the potential to transform our understanding of DNA, which serves as the complete recipe for building and running the human body. Researchers believe this advancement could significantly impact disease and medicine discovery.

AlphaGenomeDeepMind
#23•1 min read

This Data Privacy Week, the focus is on protecting people's data, but are we paying enough attention to the machines?

DataPrivacyIdentitySecurityGoogleCloudAIIAM
#22•1 min read

According to recent reports from Google Cloud, AI token usage has surged 11 times year-over-year, reaching over 90 trillion tokens processed monthly by the end of 2025. This growth reflects a shift where AI is expanding beyond engineering teams, becoming increasingly relevant to functions like marketing, HR, and finance.

IdentitySecurityAIGoogleCloudOktaIAM
#21•1 min read

Happy to share a focused action for #DataPrivacyWeek: let's audit those Google Cloud service account keys.

DataPrivacyWeekGoogleCloudIdentitySecurityCloudSecurityOkta
#20•1 min read

I’ve spent some time reflecting on my Google Cloud Generative AI Leader certification, and three things stand out about the future of AI leadership:

AIStrategyVertexAIGoogleCloudGenAIGoogleCloudCertified
#19•1 min read

What happens to your Google Cloud access the moment an employee leaves? If the answer starts with an IT ticket, you could be facing a serious privacy risk.

IdentitySecurityOktaWorkflowsGCP
#18•1 min read

What if your Zero Trust roadmap also served as your best privacy strategy?

ZeroTrustIdentitySecurityPrivacyByDesignOktaGoogleCloud
#17•1 min read

Hybrid cloud has become the standard for most enterprises today. However, connecting your legacy data center to Google Cloud requires careful consideration.

GoogleCloudNetworkingHybridCloudCloudInterconnectVPN
#16•1 min read

The theme “Take control of your data” resonates strongly with consumers, while for enterprise teams, it’s a matter of designing control through architecture.

IdentitySecurityIAMOktaGoogleCloudZeroTrust
#15•1 min read

If you manage Google Groups, you need to prepare for a significant shift in how Internal vs. External classifications are enforced. Google is officially closing the loopholes that previously allowed external members to exist inside "Internal" groups (via nesting or admin overrides).

GoogleWorkspaceITAdminCyberSecurityGoogleGroupsTechNews
#14•1 min read

The pace of AI agent adoption is nearly ten times faster than the development of governance strategies. The study shows that while the vast majority of organizations—about 91%—are using AI agents, only around 10% have formal strategies in place to manage these non-human identities effectively.

#13•1 min read

Managing identity across Google Cloud, AWS, and Azure often creates separate IAM silos—a recipe for permission sprawl and audit nightmares.

IdentitySecurityOktaGoogleCloudZeroTrustIAM
#12•1 min read

Exciting news from Google Cloud! 🚀 They've just updated their partner program in a way that really opens the door for specialists to shine.

GoogleCloudIdentitySecurityCloudArchitecturePartnerEcosystem
#11•1 min read

The most dangerous file on your laptop? It’s probably that service-account.json key. 🔑⚠️

GoogleCloudGKEKubernetesCloudSecurityDevSecOps
#10•1 min read

Building the Future of EdTech with GenAI and Cloud Run ☁️🎮

GoogleCloudServerlessCloudRunVertexAIGenAI
#9•2 min read

Automation and orchestration are now a key element of Zero Trust security.

OktaIdentitySecurityZeroTrustAutomationCloudSecurity
#8•1 min read

The AI landscape is evolving beyond just chatbots. 🚀

#7•1 min read

The 2026 cybersecurity predictions are in, and the consensus is clear: AI plays a central role in both cyber attacks and defense.

IdentitySecurityAICybersecurityOktaGoogleCloud
#6•1 min read

Recently, I’ve been exploring QUIC, the transport layer protocol behind HTTP/3.

GoogleCloudCloudArchitectureHTTP3QUICSecurityByDesign
#5•1 min read

Here’s a quick tip for managing Okta Verify updates on Windows without sacrificing stability. 💡

OktaIdentitySecurityWindowsITAdminsPowerShell
#4•1 min read

Serverless is a game-changer for speed, but for those in regulated industries (Finance, Healthcare, Public Sector), the default behaviour of Cloud Run (public URLs for everything) is often a non-starter.

GoogleCloudCloudRunServerlessCyberSecurityCloudArchitecture
#3•1 min read

Interesting developments in AI security!

GoogleCloudIdentitySecurityOktaGKEAI
#2•1 min read

If your AI agent connects to Gmail, GitHub, or Slack, it's a privileged user with powerful access.

IdentitySecurityZeroTrustAIIAMCloudSecurity
#1•1 min read

Only 33% of security leaders are confident their current identity provider can stop identity-based attacks.

#0•1 min read

Following the latest Google Cloud release notes (https://lnkd.in/e33FDsED), I've been diving into recent updates across Compute, Data, AI, and Security.

GoogleCloudCloudArchitectureGKEBigQuerySecurityByDesign