Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

451 Research report: How agentic AI is redefining identity security

In the short time that AI agents have been a part of the enterprise, they have upended many of our bedrock assumptions about the nature of identity, access, development, and work itself. At 1Password, we’ve been in the trenches of the agentic revolution; we’ve seen its positive impact on productivity, and the serious concerns it raises about security.

Developer secrets management that keeps delivery moving

In March 2025, attackers compromised a GitHub Action used in the development pipelines of more than 23,000 repositories. The malicious code exposed API keys, cloud credentials, SSH keys, and other tokens in workflow logs. Affected teams were advised to review their workflow runs and rotate any credentials the logs exposed.

The work runs itself with Jeff Wang from Cognition, Richard Liu from Anthropic | Zero-Shot Learning

While AI agents are already capable of writing and shipping code that works, standard operating procedure still requires human oversight and review. Cognition President of New Enterprise Jeff Wang is building a future where that’s no longer the case. In this episode, Jeff joins 1Password CTO Nancy Wang and special guest co-host Richard Liu, Head of API Products at Anthropic, for a conversation on cloud-based agents and how their ability to prove their own work could make human code reviews obsolete.

Cognition's Jeff Wang on demoting the IDE, with Richard Liu from Anthropic

Zero-Shot Learning is a podcast about how AI gets built, secured, and deployed. Hosted by Nancy Wang, 1Password CTO, and Dev Tagare, Senior Director of Engineering at Google, it’s a builder’s view of the architecture and the complex decisions it takes to ship with AI. This episode features guest co-host Richard Liu, Head of API Products at Anthropic, who sits in for Dev.

How to survive the AI spend hangover

It's 6:30am and you hear the door of the nightclub you've spent the last 8 hours inside shriek as it closes behind you. You watch bleary-eyed as an overly bright sunrise illuminates the business-suited people as they glide effortlessly along the sidewalk, their obnoxiously well-rested faces talking about work on their fully charged phones. You wonder, "Where did all the fun people go? And what happened to my wallet?".

Off-by-1 Labs: Why AI-generated vulnerability patches still require expert human review

We studied what happens when Large Language Models (LLMs) generate vulnerability patches for recently disclosed, complex vulnerabilities. Our data shows that LLMs produce Fix-Like Artifacts with Embedded Defects (FLAWED) 53.9% of the time when complex patches are required.

Remove standing access before AI agents exploit it

AI has changed the calculus of a credential attack. Before, finding and exploiting credentials in an enterprise environment required time, patience, and human judgment. An attacker had to decide which accounts were worth testing and which systems were worth reaching. Many credentials never made the list.