NIST and CISA finalize playbook to stop token theft and forgery

Help Net Security coverage highlights finalized NIST and CISA guidance for preventing identity and access token forgery, theft, and misuse; risks from insufficient governance of autonomous AI agents; automated discovery of exploitable Windows kernel drivers; modern Google Workspace attack chains; credential theft and identity risk; and emerging controls for API access, bot fraud, enterprise AI, and detection engineering. The feed is primarily advisory and product-focused, with no specific active incident or confirmed vulnerability requiring immediate exploitation response.