https://www.sakurasky.com/tags/series-agent-security-in-practice/Recent content in Series-Agent-Security-in-Practice on Sakura Sky: Cloud, Data, SecurityHugoen-USSakura SkyWed, 14 Oct 2026 00:00:00 -0400https://www.sakurasky.com/blog/agent-security-in-practice-part-1/Wed, 14 Oct 2026 00:00:00 -0400https://www.sakurasky.com/blog/agent-security-in-practice-part-1/<style> .series-pull-quote { float: right; clear: both; width: 340px; margin-left: 2rem; margin-bottom: 1.5rem; border: 1px solid #e9ecef; border-radius: 6px; overflow: hidden; background-color: #ffffff; position: relative; z-index: 20; } @media (max-width: 768px) { .series-pull-quote { float: none; clear: both; width: 100%; margin-left: 0; } } .series-header { background-color: #f8f9fa; color: #6c757d; font-size: 0.65rem; font-weight: 700; letter-spacing: 0.05em; padding: 0.8rem 1.25rem; border-bottom: 1px solid #e9ecef; } .part-label { display: block; font-size: 0.6rem; color: #adb5bd; margin-bottom: 0.15rem; text-transform: uppercase; } .nav-link-text { font-size: 0.85rem; line-height: 1.4; color: #495057; text-decoration: none; position: relative; z-index: 21; } .active-part { border-left: 4px solid #000 !important; background-color: #ffffff !important; } .active-part .nav-link-text { font-size: 0.9rem; font-weight: 700; color: #212529; text-decoration: underline; text-underline-offset: 3px; } .locked-part .nav-link-text { color: #ced4da; } .list-group-item { border-bottom: 1px solid #f8f9fa; padding: 1rem 1.25rem !important; } </style> <aside class="series-pull-quote shadow-sm"> <div class="series-header"> READ MORE IN THIS SERIES </div> <div class="list-group list-group-flush"> <div class="list-group-item active-part "> <div class="d-flex justify-content-between align-items-center"> <div> <a href="https://www.sakurasky.com/blog/agent-security-in-practice-part-1/" class="nav-link-text">Part 1 - Mapping the Agent Before Anyone Attacks It</a> </div> </div> </div> <div class="list-group-item locked-part"> <div class="d-flex justify-content-between align-items-center"> <div> <span class="nav-link-text">Part 2 - From an Entra Sign-In to an Agent Session</span> </div> </div> </div> <div class="list-group-item locked-part"> <div class="d-flex justify-content-between align-items-center"> <div> <span class="nav-link-text">Part 3 - Whose Authority Reaches the Tools?</span> </div> </div> </div> <div class="list-group-item locked-part"> <div class="d-flex justify-content-between align-items-center"> <div> <span class="nav-link-text">Part 4 - The Ticket That Tells the Agent What to Do</span> </div> </div> </div> <div class="list-group-item locked-part"> <div class="d-flex justify-content-between align-items-center"> <div> <span class="nav-link-text">Part 5 - Tools You Didn&#39;t Write</span> </div> </div> </div> <div class="list-group-item locked-part"> <div class="d-flex justify-content-between align-items-center"> <div> <span class="nav-link-text">Part 6 - Getting Data Out</span> </div> </div> </div> <div class="list-group-item locked-part"> <div class="d-flex justify-content-between align-items-center"> <div> <span class="nav-link-text">Part 7 - What the Agent Remembers</span> </div> </div> </div> <div class="list-group-item locked-part"> <div class="d-flex justify-content-between align-items-center"> <div> <span class="nav-link-text">Part 8 - When the Agent Is the Incident</span> </div> </div> </div> <div class="list-group-item locked-part"> <div class="d-flex justify-content-between align-items-center"> <div> <span class="nav-link-text">Part 9 - Red-Teaming Before Release</span> </div> </div> </div> </div> </aside> <p>An agent that reads tickets, queries BigQuery, and sends email usually gets reviewed one tool at a time, and each tool has an owner and an access review. What often has no owner is the chain between them: text a customer writes in a ticket can steer what the agent queries and where it sends the result. Much of the agent-specific risk sits in that chain.</p>