{"id":22177,"date":"2026-09-19T14:37:37","date_gmt":"2026-09-19T14:37:37","guid":{"rendered":"https:\/\/8657085.xyz\/?p=22177"},"modified":"2026-09-19T14:37:37","modified_gmt":"2026-09-19T14:37:37","slug":"guerassim-nikolov-explains-why-autonomous-systems-are-becoming-the-new-insider-threat","status":"publish","type":"post","link":"https:\/\/8657085.xyz\/?p=22177","title":{"rendered":"Guerassim Nikolov explains why autonomous systems are becoming the new insider threat"},"content":{"rendered":"<p> <div style=\"display: grid; grid-template-columns: 300px 160px; gap: 2px; width: 460px; background: #eee; padding: 2px;\">\r\n\r\n  <!-- \u6574\u884c\u5bbd\u5e7f\u544a -->\r\n  <div style=\"grid-column: 1\/-1; width: 460px; height: 250px; background: #ccc; display: grid; place-items: center;\">\r\n  <script async type=\"application\/javascript\" src=\"https:\/\/a.magsrv.com\/ad-provider.js\"><\/script> \r\n <ins class=\"eas6a97888e2\" data-zoneid=\"5876674\"><\/ins> \r\n <script>(AdProvider = window.AdProvider || []).push({\"serve\": {}});<\/script>\r\n  <\/div>\r\n  <div style=\"grid-column: 1\/-1; width: 460px; height: 90px; background: #ccc; display: grid; place-items: center;\">\r\n  <script async type=\"application\/javascript\" src=\"https:\/\/a.magsrv.com\/ad-provider.js\"><\/script> \r\n <ins class=\"eas6a97888e2\" data-zoneid=\"5876676\"><\/ins> \r\n <script>(AdProvider = window.AdProvider || []).push({\"serve\": {}});<\/script>\r\n  <\/div>\r\n\r\n  <!-- \u5de6\u4fa7\u7ad6\u6392 -->\r\n  <div style=\"height: 250px; background: #ccc; display: grid; place-items: center;\">\r\n  <script async type=\"application\/javascript\" src=\"https:\/\/a.magsrv.com\/ad-provider.js\"><\/script> \r\n <ins class=\"eas6a97888e2\" data-zoneid=\"5876672\"><\/ins> \r\n <script>(AdProvider = window.AdProvider || []).push({\"serve\": {}});<\/script>\r\n  <\/div>\r\n  <div style=\"height: 500px; background: #ccc; display: grid; place-items: center;\">\r\n  <script async type=\"application\/javascript\" src=\"https:\/\/a.magsrv.com\/ad-provider.js\"><\/script> \r\n <ins class=\"eas6a97888e2\" data-zoneid=\"5876680\"><\/ins> \r\n <script>(AdProvider = window.AdProvider || []).push({\"serve\": {}});<\/script>\r\n  <\/div>\r\n\r\n  <!-- \u53f3\u4fa7\u6469\u5929\u697c\uff08\u548c\u5de6\u4fa7\u5b8c\u5168\u5bf9\u9f50\uff09 -->\r\n  <div style=\"grid-row: 3\/5; height: 750px; background: #ccc; display: grid; place-items: center;\">\r\n  <script async type=\"application\/javascript\" src=\"https:\/\/a.magsrv.com\/ad-provider.js\"><\/script> \r\n <ins class=\"eas6a97888e2\" data-zoneid=\"5876678\"><\/ins> \r\n <script>(AdProvider = window.AdProvider || []).push({\"serve\": {}});<\/script>\r\n  <\/div>\r\n  \r\n  <script async type=\"application\/javascript\" src=\"https:\/\/a.magsrv.com\/ad-provider.js\"><\/script> \r\n <ins class=\"eas6a97888e6\" data-zoneid=\"5876682\"><\/ins> \r\n <script>(AdProvider = window.AdProvider || []).push({\"serve\": {}});<\/script>\r\n<\/div><br \/>\n<\/p>\n<div style=\"padding-right:0;padding-left:0\">\n<p class=\"wp-block-paragraph\"><em><em>Opinions expressed by\u00a0Digital Journal\u00a0contributors are their own.<\/em><\/em><\/p>\n<p class=\"wp-block-paragraph\">For decades, the insider threat conversation has focused on employees, malicious actors with privileged access, or well-meaning staff who make costly mistakes. That conversation now needs to expand to include entities that are not human at all. As enterprises deploy autonomous AI agents capable of accessing databases, executing API calls, managing workflows, and making decisions at machine speed, they are introducing a new class of privileged actor, one that operates continuously, without fatigue, and at a scale no human team can match.<\/p>\n<p class=\"wp-block-paragraph\">\u201cAutonomous agents change the threat model in a fundamental way,\u201d says Guerassim Nikolov, an enterprise security advisor with more than twenty years in cybersecurity strategy. \u201cA human insider with bad intentions still operates at human speed. An AI agent with compromised instructions operates at machine speed, and by the time behavioral monitoring catches it, the damage is already done. You have to apply IAM principles to these systems before they\u2019re deployed, not after an incident forces your hand.\u201d<\/p>\n<p class=\"wp-block-paragraph\">The risk was illustrated clearly by a landmark ruling in Canada. In February 2024, the British Columbia Civil Resolution Tribunal ruled in Moffatt v. Air Canada (2024 BCCRT 149) that Air Canada was fully liable for misinformation provided by its customer service chatbot. The chatbot had incorrectly told a customer that bereavement fares could be claimed retroactively, the opposite of the airline\u2019s actual policy. When Air Canada argued that its chatbot was \u2018a separate legal entity responsible for its own actions,\u2019 the tribunal rejected this outright, ruling that any AI system integrated into a company\u2019s operations is the company\u2019s full legal responsibility. Air Canada was ordered to pay damages.<\/p>\n<p class=\"wp-block-paragraph\">That case involved a relatively simple chatbot. The stakes escalate significantly when the AI system in question has privileged access to financial systems, customer records, or operational infrastructure. The OWASP Top 10 for Large Language Model Applications specifically identifies prompt injection, where malicious input manipulates an AI agent into taking unintended actions, as a primary attack vector. An attacker who successfully injects a malicious prompt into an AI agent with database write access could cause damage that takes hours or days to detect and remediate.<\/p>\n<p class=\"wp-block-paragraph\">The operating speed of autonomous agents compounds the problem. A human employee with unauthorized access might extract data over days or weeks \u2013 time during which behavioral anomalies might trigger alerts. An AI agent executing the same action does so in milliseconds. According to Palo Alto Networks\u2019 2026 predictions, autonomous agents now outnumber human employees at an 82-to-1 ratio in many enterprise environments, making manual oversight of individual agent behavior operationally impossible.<\/p>\n<p class=\"wp-block-paragraph\">Nikolov identifies the Air Canada ruling as a watershed moment. \u201cIf a simple chatbot can create full corporate liability, the stakes around agentic systems with privileged access are an order of magnitude higher. Organizations need governance frameworks that match the risk profile, not frameworks designed for the previous generation of enterprise software.\u201d<\/p>\n<p class=\"wp-block-paragraph\">The solution framework mirrors what identity and access management principles have long applied to human users: least-privilege access, so agents hold only the permissions necessary for their immediate task; behavioral monitoring tuned for machine-speed activity; defined approval thresholds, so high-risk actions require human sign-off before execution; and full audit trails, so every agent action is logged and attributable.<\/p>\n<p class=\"wp-block-paragraph\">The enterprises that will manage this risk best are those that build AI governance into deployment architecture from the start, not as a compliance checkbox, but as an operational control. The question for every AI agent is not just \u2018what can it do?\u2019 but \u2018what should it be allowed to do, and who verifies that it stays within those boundaries?\u2019<\/p>\n<\/div>\n<p><!-- \u603b\u5bb9\u5668\uff1a\u6700\u5927\u5bbd908px Grid\u7d27\u51d1\u5e03\u5c40 -->\r\n<div style=\"display: grid; grid-template-columns: 728px 160px; gap:2px; width:908px; background:#eee; padding:2px;\">\r\n\r\n  <!-- \u901a\u680f\u9876\u90e8\uff1a\u6700\u5927\u6a2a\u5e45 908x258 \u8de8\u6574\u884c -->\r\n  <div style=\"grid-column:1\/-1; height:258px; background:#ff6b6b; display:grid; place-items:center;\">\r\n    <!-- JuicyAds v3.0 -->\r\n<script type=\"text\/javascript\" data-cfasync=\"false\" async src=\"https:\/\/poweredby.jads.co\/js\/jads.js\"><\/script>\r\n<ins id=\"1114307\" data-width=\"908\" data-height=\"258\"><\/ins>\r\n<script type=\"text\/javascript\" data-cfasync=\"false\" async>(adsbyjuicy = window.adsbyjuicy || []).push({'adzone':1114307});<\/script>\r\n<!--JuicyAds END-->\r\n  <\/div>\r\n\r\n  <!-- \u7b2c\u4e8c\u901a\u680f\uff1a728\u00d790 \u901a\u680f -->\r\n  <div style=\"grid-column:1\/-1; height:90px; background:#4ecdc4; display:grid; place-items:center;\">\r\n    <!-- JuicyAds v3.0 -->\r\n<script type=\"text\/javascript\" data-cfasync=\"false\" async src=\"https:\/\/poweredby.jads.co\/js\/jads.js\"><\/script>\r\n<ins id=\"1114300\" data-width=\"728\" data-height=\"90\"><\/ins>\r\n<script type=\"text\/javascript\" data-cfasync=\"false\" async>(adsbyjuicy = window.adsbyjuicy || []).push({'adzone':1114300});<\/script>\r\n<!--JuicyAds END-->\r\n  <\/div>\r\n\r\n  <!-- \u5de6\u4fa7\u4e3b\u680f\uff1a\u591a\u5e7f\u544a\u5806\u53e0 -->\r\n  <div style=\"display:grid; gap:2px;\">\r\n    <div style=\"height:60px; background:#45b7d1; display:grid; place-items:center;\">\r\n\t<!-- JuicyAds v3.0 -->\r\n<script type=\"text\/javascript\" data-cfasync=\"false\" async src=\"https:\/\/poweredby.jads.co\/js\/jads.js\"><\/script>\r\n<ins id=\"1114308\" data-width=\"468\" data-height=\"60\"><\/ins>\r\n<script type=\"text\/javascript\" data-cfasync=\"false\" async>(adsbyjuicy = window.adsbyjuicy || []).push({'adzone':1114308});<\/script>\r\n<!--JuicyAds END-->\r\n\t<\/div>\r\n    <div style=\"height:250px; background:#ffe066; display:grid; place-items:center;\">\r\n\t<!-- JuicyAds v3.0 -->\r\n<script type=\"text\/javascript\" data-cfasync=\"false\" async src=\"https:\/\/poweredby.jads.co\/js\/jads.js\"><\/script>\r\n<ins id=\"1114299\" data-width=\"300\" data-height=\"250\"><\/ins>\r\n<script type=\"text\/javascript\" data-cfasync=\"false\" async>(adsbyjuicy = window.adsbyjuicy || []).push({'adzone':1114299});<\/script>\r\n<!--JuicyAds END-->\r\n\t<\/div>\r\n    <div style=\"height:250px; background:#ff9ecd; display:grid; place-items:center;\">\r\n\t<!-- JuicyAds v3.0 -->\r\n<script type=\"text\/javascript\" data-cfasync=\"false\" async src=\"https:\/\/poweredby.jads.co\/js\/jads.js\"><\/script>\r\n<ins id=\"1114305\" data-width=\"250\" data-height=\"250\"><\/ins>\r\n<script type=\"text\/javascript\" data-cfasync=\"false\" async>(adsbyjuicy = window.adsbyjuicy || []).push({'adzone':1114305});<\/script>\r\n<!--JuicyAds END-->\r\n\t<\/div>\r\n    <div style=\"height:139px; background:#c792ea; display:grid; place-items:center;\">\r\n\t<!-- JuicyAds v3.0 -->\r\n<script type=\"text\/javascript\" data-cfasync=\"false\" async src=\"https:\/\/poweredby.jads.co\/js\/jads.js\"><\/script>\r\n<ins id=\"1114302\" data-width=\"133\" data-height=\"139\"><\/ins>\r\n<script type=\"text\/javascript\" data-cfasync=\"false\" async>(adsbyjuicy = window.adsbyjuicy || []).push({'adzone':1114302});<\/script>\r\n<!--JuicyAds END-->\r\n\t<\/div>\r\n    <div style=\"height:125px; background:#91e7ac; display:grid; place-items:center;\">\r\n\t\r\n<!-- JuicyAds v3.0 -->\r\n<script type=\"text\/javascript\" data-cfasync=\"false\" async src=\"https:\/\/poweredby.jads.co\/js\/jads.js\"><\/script>\r\n<ins id=\"1114303\" data-width=\"125\" data-height=\"125\"><\/ins>\r\n<script type=\"text\/javascript\" data-cfasync=\"false\" async>(adsbyjuicy = window.adsbyjuicy || []).push({'adzone':1114303});<\/script>\r\n<!--JuicyAds END-->\r\n\t<\/div>\r\n  <\/div>\r\n\r\n  <!-- \u53f3\u4fa7\u7ad6\u680f\uff1a160\u00d7600 \u6574\u5217\u9ad8\u5e7f\u544a -->\r\n  <div style=\"grid-row:3\/8; height:600px;  display:grid; place-items:center;\">\r\n    <!-- JuicyAds v3.0 -->\r\n<script type=\"text\/javascript\" data-cfasync=\"false\" async src=\"https:\/\/poweredby.jads.co\/js\/jads.js\"><\/script>\r\n<ins id=\"1114301\" data-width=\"160\" data-height=\"600\"><\/ins>\r\n<script type=\"text\/javascript\" data-cfasync=\"false\" async>(adsbyjuicy = window.adsbyjuicy || []).push({'adzone':1114301});<\/script>\r\n<!--JuicyAds END-->\r\n  <\/div>\r\n\r\n<\/div><br \/>\n<br \/> Guerassim Nikolov explains why autonomous systems are becoming the new insider threat<br \/>\n<br \/>#Guerassim #Nikolov #explains #autonomous #systems #insider #threat<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Opinions expressed by\u00a0Digital Journal\u00a0contributors are their own. For decades, the insider threat conversation has focused&#8230;<\/p>\n","protected":false},"author":1,"featured_media":22178,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7],"tags":[13591,5172,16224,1363,16225,2393,1583],"class_list":["post-22177","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-stories","tag-autonomous","tag-explains","tag-guerassim","tag-insider","tag-nikolov","tag-systems","tag-threat"],"featured_image_urls":{"full":["https:\/\/8657085.xyz\/wp-content\/uploads\/2026\/09\/TechTO-11-57.png",1600,900,false],"thumbnail":["https:\/\/8657085.xyz\/wp-content\/uploads\/2026\/09\/TechTO-11-57-150x150.png",150,150,true],"medium":["https:\/\/8657085.xyz\/wp-content\/uploads\/2026\/09\/TechTO-11-57-300x169.png",300,169,true],"medium_large":["https:\/\/8657085.xyz\/wp-content\/uploads\/2026\/09\/TechTO-11-57-768x432.png",640,360,true],"large":["https:\/\/8657085.xyz\/wp-content\/uploads\/2026\/09\/TechTO-11-57-1024x576.png",640,360,true],"1536x1536":["https:\/\/8657085.xyz\/wp-content\/uploads\/2026\/09\/TechTO-11-57-1536x864.png",1536,864,true],"2048x2048":["https:\/\/8657085.xyz\/wp-content\/uploads\/2026\/09\/TechTO-11-57.png",1600,900,false],"covernews-slider-full":["https:\/\/8657085.xyz\/wp-content\/uploads\/2026\/09\/TechTO-11-57-1115x715.png",1115,715,true],"covernews-slider-center":["https:\/\/8657085.xyz\/wp-content\/uploads\/2026\/09\/TechTO-11-57-800x500.png",800,500,true],"covernews-featured":["https:\/\/8657085.xyz\/wp-content\/uploads\/2026\/09\/TechTO-11-57-1024x576.png",1024,576,true],"covernews-medium":["https:\/\/8657085.xyz\/wp-content\/uploads\/2026\/09\/TechTO-11-57-540x340.png",540,340,true],"covernews-medium-square":["https:\/\/8657085.xyz\/wp-content\/uploads\/2026\/09\/TechTO-11-57-400x250.png",400,250,true]},"author_info":{"display_name":"admin","author_link":"https:\/\/8657085.xyz\/?author=1"},"category_info":"<a href=\"https:\/\/8657085.xyz\/?cat=7\" rel=\"category\">Stories<\/a>","tag_info":"Stories","comment_count":"0","_links":{"self":[{"href":"https:\/\/8657085.xyz\/index.php?rest_route=\/wp\/v2\/posts\/22177","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/8657085.xyz\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/8657085.xyz\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/8657085.xyz\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/8657085.xyz\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=22177"}],"version-history":[{"count":0,"href":"https:\/\/8657085.xyz\/index.php?rest_route=\/wp\/v2\/posts\/22177\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/8657085.xyz\/index.php?rest_route=\/wp\/v2\/media\/22178"}],"wp:attachment":[{"href":"https:\/\/8657085.xyz\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=22177"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/8657085.xyz\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=22177"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/8657085.xyz\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=22177"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}