TREE NEWS update: Web3 security firm CertiK released its Intel3D report “The Rise of AI Employees: How Agentic AI Is Reshaping Cybersecurity, AML and Compliance” on Tuesday, saying AI is moving from an analyst aid to a team member that can investigate, judge and act within set permissions. The shift is reshaping security and compliance in traditional finance and Web3, CertiK said, while warning of model misjudgment, prompt injection and attackers’ use of AI. It recommended governance covering permission boundaries, human approval, decision logs and accountability, plus regular red-team testing.
CertiK Report: Agentic AI Shifts From Tool to ‘AI Employee’ in Security and Compliance
The framing matters more than the technology here: once AI agents hold permissions to investigate and act, security and compliance stop being tooling questions and become governance questions. CertiK's own list — permission boundaries, human approval, decision logs, accountability — is essentially an admission that the hard part is not detection but who answers when an agent gets it wrong. The same capabilities that make agents useful to defenders make them useful to attackers, so the open question is whether permission design and red-teaming keep pace with deployment.
Generated by AI for reference only.
Share on WeChat
Open WeChat → Scan → then tap "…" to send to a chat or Moments.
Tap "…" in the top-right corner to send to a chat or share to Moments.