Between AI Urgency and AI Fatigue at RSAC 2026

A firsthand account from RSAC 2026 covering the dominant themes of AI urgency versus AI fatigue among 44,000 security practitioners. Key discussions included agentic AI governance, the concept of intent as a core security control, and how attackers are exploiting trusted integrations and stolen secrets rather than exotic methods. A live supply chain attack (TeamPCP) targeting CI/CD credentials unfolded during the event, reinforcing the conference's focus on non-human identities, secrets exposure, and the need for real-time validation over alert-heavy detection. The overarching message: security teams must govern AI agents like privileged insiders and build systems that move fast without losing control over trust.