Something shifted in the last couple months. Every security conversation used to circle back to cloud, patching, the usual stuff. Now it's who approved this tool, what's it touching… how do you even audit something making its own calls. Half …

Just realized we have no idea how many AI agents are actually running in our environment right now. Started trying to count them and gave up. Service accounts I can track. API keys, sort of. But agents that spin up, do something, and disappear? No idea…