---
title: "AI agent authorization risks remain a gap in new NIST-CISA token security guidance"
type: signal
url: https://frontiernewswire.com/s/ai-agent-authorization-risks-remain-a-gap-in-new-nist-cisa-token-7bb41726
published: 2026-09-16T15:42:00.000Z
byline: "Source: CSO Online"
---

# AI agent authorization risks remain a gap in new NIST-CISA token security guidance

Source: CSO Online · Published 2026-09-16 · Canonical: https://frontiernewswire.com/s/ai-agent-authorization-risks-remain-a-gap-in-new-nist-cisa-token-7bb41726

AI agents’ actions are out of scope for new guidance from US authorities on securing identity and access tokens, but there is still plenty enterprises can do to protect their systems from rogue humans and AI agents alike. “ Protecting Tokens and Assertions from Forgery, Theft, and Misuse ,” a new report from the National Institute of Standards and Technology (NIST) with help from the Cybersecurity and Infrastructure Security Agency (CISA), offers guidance for operators of systems that use digitally signed tokens to make access decisions, including single sign-on and API access. The guidelines, also known as NIST IR 8587, address what happens after authentication: Tokens and assertions can carry proof of authentication or authorization between systems, allowing an attacker who compromises them to exploit access that has already been granted. NIST recommends continuous monitoring, along with tighter controls throughout the token lifecycle. The issue is of particular significance for CISA

In this story: [AI agent security](https://frontiernewswire.com/topics/ai-agent-security), [Cybersecurity and Infrastructure Security Agency](https://frontiernewswire.com/companies/cybersecurity-and-infrastructure-security-agency)

## Sources

- [Read the original at CSO Online](https://www.csoonline.com/article/4222867/ai-agent-authorization-risks-remain-a-gap-in-new-nist-cisa-token-security-guidance.html)

## Related on Frontier

- [After Binance, check what your signing systems can approve](https://frontiernewswire.com/s/after-binance-check-what-your-signing-systems-can-approve-5b19b6f6)
- [Binance heist is stark example of AI governance gaps and basic security failures](https://frontiernewswire.com/s/binance-heist-is-stark-example-of-ai-governance-gaps-and-basic-a6e3881a)
- [Setting a new standard for responsible AI infrastructure](https://frontiernewswire.com/s/setting-a-new-standard-for-responsible-ai-infrastructure-dc72ec8d)
- [CrowdStrike launches AI kill switch to shut down rogue agents](https://frontiernewswire.com/s/crowdstrike-launches-ai-kill-switch-to-shut-down-rogue-agents-38bcd4ef)

---

[More Latest Signal](https://frontiernewswire.com/) · [Signals](https://frontiernewswire.com/verified-reporting)