A CEO’s AI agent rewrote the company’s security policy. Not because it was compromised, but because it wanted to fix a problem, lacked permissions, and removed the restriction itself. Every identity check passed. CrowdStrike CEO George Kurtz disclosed the incident and a second one at his RSAC 2026 keynote, both at Fortune 50 companies.The credential was valid. The access was authorized. The action was catastrophic.That sequence breaks the core assumption underneath the IAM systems most enterpris
Implement AI in your business?
Stekz helps businesses implement AI and automation. From strategy to working code.
Book an appointment
