Cyber Daily Report

None--securityboulevard.com
published date: 2026-01-15 00:00:00 UTC

None

As we speak, I’m remodeling my kitchen and relied heavily on ChatGPT to research sinks, compare reviews, and determine whether I can do all the pipe-work myself. <a href="https://www.kasada.io/ai-agents-and-the-trust-gap/screenshot-2026-01-15-at-11-16-32-am/" rel="attachment wp-att-17304"><img fetchpriority="high" decoding="async" class="wp-image-17304 size-fusion-800 aligncenter" src="https://www.kasada.io/wp-content/uploads/2026/01/Screenshot-2026-01-15-at-11.16.32-AM-800x610.png" alt="Example of AI prompt" width="800" height="610" srcset="https://www.kasada.io/wp-content/uploads/2026/01/Screenshot-2026-01-15-at-11.16.32-AM-200x153.png 200w, https://www.kasada.io/wp-content/uploads/2026/01/Screenshot-2026-01-15-at-11.16.32-AM-300x229.png 300w, https://www.kasada.io/wp-content/uploads/2026/01/Screenshot-2026-01-15-at-11.16.32-AM-400x305.png 400w, https://www.kasada.io/wp-content/uploads/2026/01/Screenshot-2026-01-15-at-11.16.32-AM-600x458.png 600w, https://www.kasada.io/wp-content/uploads/2026/01/Screenshot-2026-01-15-at-11.16.32-AM-768x586.png 768w, https://www.kasada.io/wp-content/uploads/2026/01/Screenshot-2026-01-15-at-11.16.32-AM-800x610.png 800w, https://www.kasada.io/wp-content/uploads/2026/01/Screenshot-2026-01-15-at-11.16.32-AM-1024x781.png 1024w, https://www.kasada.io/wp-content/uploads/2026/01/Screenshot-2026-01-15-at-11.16.32-AM-1200x916.png 1200w, https://www.kasada.io/wp-content/uploads/2026/01/Screenshot-2026-01-15-at-11.16.32-AM-1536x1172.png 1536w" sizes="(max-width: 800px) 100vw, 800px"></a>Between my personal life and my role as a technical product marketer, I’m all for AI. But something Jono, our Head of Product, said recently initially felt counterintuitive: fraud rings won’t be using ChatGPT’s agentic mode any time soon to do the type of fraud we usually see. That is, they won’t be opening up ChatGPT accounts en masse and using the agentic mode to replace what they can do with <a href="https://www.kasada.io/solver-services-fraudsters-bypass-bot-management/" rel="nofollow">solvers</a>, residential proxies, and <a href="https://hackernoon.com/scrape-smarter-not-harder-let-mcp-and-ai-write-your-next-scraper-for-you" rel="nofollow noopener">scraping API companies</a> like <a href="https://hackernoon.com/scrape-smarter-not-harder-let-mcp-and-ai-write-your-next-scraper-for-you" rel="nofollow noopener">FireCrawl</a>. The more I thought about it, the more it made sense.At least for now, AI tools are better described as general‑purpose hacker tooling than a full substitute for existing fraud infrastructure. We do see them used to generate fake accounts or produce code—and in some cases, you can literally see ChatGPT‑generated code patterns show up in request logs. But they’re not yet a wholesale replacement.That nuance matters.Like many people, I’m bullish on AI but conservative when it comes to risk—especially financial and security risk. I want to capture upside while limiting downside. Most Fortune 500 companies we work with feel the same way.And this is where the real tension shows up.Marketing teams want to open the floodgates. Security teams want to lock them shut. Somewhere in between is a workable middle ground—but it’s not obvious where that line should be.So what does “sensible and forward‑looking” actually look like?Here’s how we’ve been thinking about it at Kasada.<h2>The same AI company is multiple things</h2>OpenAI’s ChatGPT isn’t one thing. It’s a browser acting on behalf of a user and an automated scraper and an agentic commerce client, depending on context.All three may have different cryptographic signatures, but can we trust their intended use? All three are “really ChatGPT,” but they carry completely different risk profiles:<ul> <li style="font-weight: 400;" aria-level="1">Browser mode: A user is in the loop. They’re shopping, researching, maybe adding to cart. This looks like a customer journey with an AI assist.</li> <li style="font-weight: 400;" aria-level="1">Scraper mode: No user interaction. Automated requests pulling product data, pricing, and inventory. This might be competitive intelligence. It might be training data for a competitor.</li> <li style="font-weight: 400;" aria-level="1">Agentic mode: An agent attempting to complete transactions on a user’s behalf. Sign up, checkout, booking, redemptions. High-value actions with real consequences.</li> </ul>One ChatGPT. Three discrete governance problems.Treating all of that as “just ChatGPT” creates blind spots. Each mode represents a separate governance problem, and collapsing them into one policy guarantees either over‑blocking or under‑protection.<h2>Each industry wants different things</h2>There’s no universal default for how AI traffic should be handled.We count some of the biggest companies across e-commerce, hospitality, media, and financial services as customers. And there isn’t a clear pattern on how AI helps them, they just know they have to adapt. Every industry wants something different.If you’re selling sneakers, you probably want AI search visibility. You want to show up when someone’s shopping agent looks for “best running shoes under $150.” But you don’t want that same agent creating accounts or burning through promo codes.If you’re a media platform like Reddit, you may want almost none of it. You don’t want your content scraped for training data. However, you likely still want search referral traffic.The same endpoint—say, product search—might be wide open for one business and locked down for another. There is no one‑size‑fits‑all policy—and that’s the point.<h2>Prompts are not secure by default</h2>Some teams assume they can rely on LLM guardrails or system prompts to constrain agent behavior. The agent’s prompt might say, “never attempt checkout without explicit user confirmation.”That is wishful thinking. Prompts can be overridden. Agents can be jailbroken. The model itself might hallucinate past its constraints.You can’t treat the agent’s instructions as a reliable security boundary. Governance has to happen at your edge—where you can verify identity, enforce permissions, detect anomalies, and observe behavior over time.(If you’re interested in this topic, <a href="https://www.lennysnewsletter.com/p/the-coming-ai-security-crisis" rel="nofollow noopener">Lenny’s podcast</a> has a great interview with Sander Schulhoff, an AI security researcher.)<a href="https://www.lennysnewsletter.com/p/the-coming-ai-security-crisis" rel="attachment wp-att-17305 nofollow noopener"><img decoding="async" class="wp-image-17305 size-fusion-800 aligncenter" src="https://www.kasada.io/wp-content/uploads/2026/01/Screenshot-2026-01-15-at-11.16.46-AM-800x460.png" alt="Podcast about AI agent security" width="800" height="460" srcset="https://www.kasada.io/wp-content/uploads/2026/01/Screenshot-2026-01-15-at-11.16.46-AM-200x115.png 200w, https://www.kasada.io/wp-content/uploads/2026/01/Screenshot-2026-01-15-at-11.16.46-AM-300x172.png 300w, https://www.kasada.io/wp-content/uploads/2026/01/Screenshot-2026-01-15-at-11.16.46-AM-400x230.png 400w, https://www.kasada.io/wp-content/uploads/2026/01/Screenshot-2026-01-15-at-11.16.46-AM-600x345.png 600w, https://www.kasada.io/wp-content/uploads/2026/01/Screenshot-2026-01-15-at-11.16.46-AM-768x442.png 768w, https://www.kasada.io/wp-content/uploads/2026/01/Screenshot-2026-01-15-at-11.16.46-AM-800x460.png 800w, https://www.kasada.io/wp-content/uploads/2026/01/Screenshot-2026-01-15-at-11.16.46-AM-1024x589.png 1024w, https://www.kasada.io/wp-content/uploads/2026/01/Screenshot-2026-01-15-at-11.16.46-AM-1200x690.png 1200w, https://www.kasada.io/wp-content/uploads/2026/01/Screenshot-2026-01-15-at-11.16.46-AM-1536x883.png 1536w" sizes="(max-width: 800px) 100vw, 800px"></a><h2>Verification is table stakes</h2>The industry is converging on cryptographic request signing. Standards like <a href="https://datatracker.ietf.org/wg/webbotauth/about/" rel="nofollow noopener">Web Bot Auth</a> allow agents to prove who they are, not just claim it.This is necessary infrastructure.But verification alone doesn’t answer the harder question: should this request be allowed?Knowing a request came from OpenAI doesn’t tell you whether it’s a browsing request, a scraper, or an agent attempting a high‑risk action. Nor does it tell you what that agent should be permitted to do on your site.Meaningful control requires:<ul> <li style="font-weight: 400;" aria-level="1">Permissions per endpoint</li> <li style="font-weight: 400;" aria-level="1">Permissions per action</li> <li style="font-weight: 400;" aria-level="1">The ability to distinguish between different modes from the same provider</li> </ul>Identity without authorization is just better labeling.<h2>It’s still early days</h2>Everyone’s talking about agentic commerce like it’s already here. Agents booking flights. Agents completing purchases. End-to-end automation.That’s not what we’re seeing in the traffic.The reality is messier. Agents browse. They research. They add items to carts. But the “book my flight from zero to 100” future? It’s not here yet—even if technical teams are running POCs with the latest standards.Will it arrive? Probably. Soon? Maybe.Which is exactly why rigid, static rules written today are likely to break tomorrow.<h2>The opportunity in the gap</h2>This is the part that matters most now.Everyone’s preparing for a future that hasn’t fully arrived. Since every industry is different, I’d start by creating a simple diagram defining the benefit and risk. Does the benefit of AEO outweigh the probability of it being used for LLM training? It depends. You have time to build the framework now, while the traffic is still small enough to understand. That gives teams time to establish visibility, set sane defaults, establish visibility, and create permissions that flex as capabilities mature.The teams that wait until agentic commerce is “big enough to matter” will discover it mattered earlier than they thought—just quietly and without controls in place.The hype says agents will transform everything overnight.The traffic says you have a window to get this right.Use it.If you’re thinking about how to distinguish AI browsing from scraping from agentic action—and how to apply controls that evolve as capabilities mature—<a href="https://hubs.la/Q03-_dwP0" rel="nofollow noopener">register for our upcoming webinar</a> on January 29th.Jono and I look forward to seeing you there.The post <a rel="nofollow" href="https://www.kasada.io/ai-agents-and-the-trust-gap/">AI, agents, and the trust gap</a> appeared first on <a rel="nofollow" href="https://www.kasada.io/">Kasada</a>.<div class="spu-placeholder" style="display:none"></div><div class="addtoany_share_save_container addtoany_content addtoany_content_bottom"><div class="a2a_kit a2a_kit_size_20 addtoany_list" data-a2a-url="https://securityboulevard.com/2026/01/ai-agents-and-the-trust-gap/" data-a2a-title="AI, agents, and the trust gap"><a class="a2a_button_twitter" href="https://www.addtoany.com/add_to/twitter?linkurl=https%3A%2F%2Fsecurityboulevard.com%2F2026%2F01%2Fai-agents-and-the-trust-gap%2F&linkname=AI%2C%20agents%2C%20and%20the%20trust%20gap" title="Twitter" rel="nofollow noopener" target="_blank"></a><a class="a2a_button_linkedin" href="https://www.addtoany.com/add_to/linkedin?linkurl=https%3A%2F%2Fsecurityboulevard.com%2F2026%2F01%2Fai-agents-and-the-trust-gap%2F&linkname=AI%2C%20agents%2C%20and%20the%20trust%20gap" title="LinkedIn" rel="nofollow noopener" target="_blank"></a><a class="a2a_button_facebook" href="https://www.addtoany.com/add_to/facebook?linkurl=https%3A%2F%2Fsecurityboulevard.com%2F2026%2F01%2Fai-agents-and-the-trust-gap%2F&linkname=AI%2C%20agents%2C%20and%20the%20trust%20gap" title="Facebook" rel="nofollow noopener" target="_blank"></a><a class="a2a_button_reddit" href="https://www.addtoany.com/add_to/reddit?linkurl=https%3A%2F%2Fsecurityboulevard.com%2F2026%2F01%2Fai-agents-and-the-trust-gap%2F&linkname=AI%2C%20agents%2C%20and%20the%20trust%20gap" title="Reddit" rel="nofollow noopener" target="_blank"></a><a class="a2a_button_email" href="https://www.addtoany.com/add_to/email?linkurl=https%3A%2F%2Fsecurityboulevard.com%2F2026%2F01%2Fai-agents-and-the-trust-gap%2F&linkname=AI%2C%20agents%2C%20and%20the%20trust%20gap" title="Email" rel="nofollow noopener" target="_blank"></a><a class="a2a_dd addtoany_share_save addtoany_share" href="https://www.addtoany.com/share"></a></div></div>*** This is a Security Bloggers Network syndicated blog from <a href="https://www.kasada.io">Kasada</a> authored by <a href="https://securityboulevard.com/author/0/" title="Read other posts by Edgar Cerecerez">Edgar Cerecerez</a>. Read the original post at: <a href="https://www.kasada.io/ai-agents-and-the-trust-gap/">https://www.kasada.io/ai-agents-and-the-trust-gap/</a>