Part 2 to A Retrospective on VoidLink and the Emerging Workload Security Threat.

Cisco's platform provides networking knowledge, offering  guides, tutorials, and case studies on networking technologies, cybersecurity, and collaboration tools. Whether you're a networking novice looking to understand the basics of routing and switching or a seasoned IT professional seeking advanced insights into network architecture and security protocols, Cisco has resources tailored to your needs. Dive into Cisco's extensive library of resources to sharpen your networking skills and stay ahead in the rapidly evolving world of IT infrastructure.

Cisco

Enterprise identity systems are dangerously unprepared for the era of AI agents and machine identities. Machine identities now outnumber human ones 82-to-1, and AI agents introduce new challenges: shared identities across agent instances make forensic attribution impossible, and delegation chains (agent spawning sub-agents) create unresolved accountability gaps. Workload identity standards like SPIFFE/SPIRE help by issuing short-lived rotating credentials that neutralize credential-harvesting malware like VoidLink, but these standards were designed for predictable software services, not autonomous agents making runtime decisions. Three unsolved problems are highlighted: liability in agent chains, defining consent scopes for delegation, and enforcing boundaries on unpredictable entities. The recommended path forward is extending zero trust principles to workloads and AI agents, integrating runtime security (kernel-level), workload identity, and observability into a unified platform.

Identity is the Battleground

The Attacks from Part 1 Were Identity Failures

What Workload Identity Gets Right — And Where It Falls Short

Identity Makes Runtime Security Actionable

The Path Forward: Zero Trust Must Extend to Agents