news/blog

corporate

news

English

_ga_NW6DGNR3MQ

vip-go-seg

idg-edition

__cf_bm

consentUUID

lastSessionDate

_gcl_au

sessionNumWP

currentSessionDate

inSession

firstSessionDate

Domain 'www.cio.com' uses the commercial generic top-level domain (.com) and includes subdomain 'www'. The registrable portion 'cio' spans 3 characters with 2 vowels and one consonant. Splitting it apart reveals one word: cio. The linguistic tilt is Italian for 'cio'. You will also see it in Bosnian and Esperanto contexts.

html/8c/c7/8cc7b097-77d5-4f19-bad5-2feee6bd51bf_fallback.html.gz

The real AI risk isn’t AGI — it’s unregulated machine identity | CIO

newsletter_signup_nonce

_wp_http_referer

rr_nl_user_email

html/8c/c7/8cc7b097-77d5-4f19-bad5-2feee6bd51bf.html.gz

appId=cid-v1:2321eb9a-ac9e-4923-8707-ae52020e7b4d

script-src 'unsafe-eval' 'self' 'unsafe-inline' https://www.google.com https://apis.google.com https://ssl.gstatic.com https://www.gstatic.com https://www.googletagmanager.com https://www.google-analytics.com https://*.youtube.com https://*.google.com https://*.gstatic.com https://youtube.com https://www.youtube.com https://google.com https://*.doubleclick.net https://*.googleapis.com https://www.googleadservices.com https://tpc.googlesyndication.com https://www.youtubekids.com https://www.youtube-nocookie.com https://www.youtubeeducation.com https://www-onepick-opensocial.googleusercontent.com;report-uri /cspreport/allowlist

script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:103:0

SP Consent Message

viewport

Artificial Intelligence, Cyberattacks, Cybercrime, Identity and Access Management, Network Security, Security

robots

amazonbot

twitter:label1

twitter:data1

twitter:label2

twitter:data2

displaytype

content_type

https://www.cio.com/article/4075672/the-real-ai-risk-isnt-agi-its-unregulated-machine-identity.html

source

date

Everyone’s worried about AGI, but the real threat’s already here — bots with keys to the kingdom. Until we secure them, creds remain the weak spot.

description

The real AI risk isn’t AGI — it’s unregulated machine identity

https://www.cio.com/wp-content/uploads/2025/10/4075672-0-12998400-1761044732-digital-access-machine-identity-non-human-management.jpg?quality=50&strip=all&w=1024

https://www.cio.com/wp-content/uploads/2023/02/cropped-CIO-favicon-2023.png?w=270

msapplication-TileImage

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

MarkMonitor Inc.

CIO.COM

Amazon EC2 Abuse

IP Management

Amazon AWS Network Operations

Amazon.com, Inc.

AWS RPKI Management POC

IP Routing

Amazon EC2 Network Operations

AMAZO-CF


		window.isBrandPostSeriesLanding = "false";
	


window._sp_analytics = {
	config: {
		accountId: 146,
		events: {
			onDetectionComplete: function() {
				console.log('onMessageReady');
			}
		},
	}
};



		//CMP Stub
	"use strict";function _typeof(t){return(_typeof="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Symbol&


wp.i18n.setLocaleData( { 'text direction\u0004ltr': [ 'ltr' ] } );



var IDG = {"settings":{"cmp":{"account":{"id":"146","base_endpoint":"https:\/\/cmpv2.cio.com","href":"https:\/\/cio.com","is_cp_multi_campaign_enabled":true},"gdpr":{"script":"https:\/\/cmpv2.cio.com


			window.dataLayer = window.dataLayer || [];
			window.dataLayer.push({"adBlockerEnabled":true,"arenaId":"","audience":"enterprise","ccpaOptedOut":"false","environment":"wp_production","sessionNumbe


				window.blocksForConsent = {
						"instagram": {
							"platform": "instagram",
							"platformName": "Instagram.com",
							"selector": ".wp-block-embed-instagram",
							"privacyPolicyLink"

[{"@context":"https:\/\/schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.cio.com\/"},{"@type":"ListItem","position":2,"name"


		function redirectURL(redirecturl) {
			if (redirecturl) {
				window.location = redirecturl;
			}
		}
	


document.addEventListener("DOMContentLoaded", () => {
 const pageTitle = document.querySelector(".listing-hero__title.listing-hero__title");
 if (!pageTitle) return;

 if (pageTitle.textContent.trim(


			var subscribersSiteId = "41af4c1f-bdcb-4f2f-843e-3adc90638ac9";
			var subscribersServiceWorkerPath = '/?firebase-messaging-sw';
		


			__tcfapi("addEventListener", 2, function(tcData, success) {				
				if ( success && (tcData.eventStatus === "tcloaded" || tcData.eventStatus === "useractioncomplete") ) {
					var subscribersInter


{"prefetch":[{"source":"document","where":{"and":[{"href_matches":"\/*"},{"not":{"href_matches":["\/wp-*.php","\/wp-admin\/*","\/wp-content\/uploads\/*","\/wp-content\/*","\/wp-content\/plugins\/*","


			jQuery(document).on("click",".consent-button",function() {
				const consentButton = event.target;
				const embedType = jQuery(consentButton).data('type');
				const callback = jQuery(consentButt


			window.addEventListener('DOMContentLoaded', function() {
				var iframes = document.querySelectorAll('.podigee-podcast-player');
				iframes.forEach(function(iframe) {
					var src = iframe.getAtt


		window.addEventListener('DOMContentLoaded', function() {
				// Get all figure elements with class wp-block-embed-reddit
				var figureElements = document.querySelectorAll('.wp-block-embed-reddit')

										
					__tcfapi("addEventListener", 2, function(tcData, success) {
						if ( success && (tcData.eventStatus === "tcloaded" || tcData.eventStatus === "useractioncomplete") ) {								
							


    /**
     * Global function to check for individual vendor consent (GDPR)
     * aswell as CCPA opt-out status
     * Example:
     */
    var gtmConsentCheckDebugging = true;

    window.gtmConse

(function(g,h,D){function v(){g.readyState!=="loading"?q():"addEventListener"in g?w(g,"DOMContentLoaded",q):w(h,"load",q)}function q(){var a=[].slice.call(g.getElementsByTagName("iframe")).concat([].s

var adnamiB2BScript=document.createElement("script");adnamiB2BScript.type="text/javascript";adnamiB2BScript.async=!0;adnamiB2BScript.src="https://functions.adnami.io/api/macro/adsm.macro.cio.com.js";d


(function () {
    var debug = document.location.host.search(/lndo.site|go-vip.net|contentpass-develop/) !== -1 ||
                document.location.search.search('debug') !== -1;
    var checkIfInEU

var bcGtaxList=google_tag_manager["rm"]["220693796"](12).split(", "),bcGtaxIdList=google_tag_manager["rm"]["220693796"](13).split(", ");window.dataLayer=window.dataLayer||[];window.dataLayer.push({bcG

var queryString=window.location.search,urlParams=new URLSearchParams(queryString),showFocusItem=urlParams.get("show_mautic_focus_item");showFocusItem==="true"&&window.dataLayer.push({event:"show_mauti

function duplicateCookiesToRootDomain(){var f=["mtc_id","mtc_sid","mautic_device_id","mautic_referer_id"],a=document.location.hostname.split(".");a[0]==="www"&&a.shift();a="."+a.join(".");for(var d=0;

var firstSessionDate=google_tag_manager["rm"]["220693796"](14),lastSessionDate=google_tag_manager["rm"]["220693796"](15),currentSessionDate=google_tag_manager["rm"]["220693796"](16),sessionNumber=goog


var ajaxload_params = {"ajaxurl":"https:\/\/www.cio.com\/wp-admin\/admin-ajax.php","nonce":"e3e54e5255"};



var siteData = {"site":"cio.com","connectedhub":"b2b"};
var googleSearch = {"search_engine_id":"011881588825642368632:qdznsbfg9ww","search_title":"Search","search_slug":"search"};



var ajaxload_params = {"ajaxurl":"https:\/\/www.cio.com\/wp-admin\/admin-ajax.php","nonce":"9f5d76cee6"};



var ajaxload_event_params = {"ajaxurl":"https:\/\/www.cio.com\/wp-admin\/admin-ajax.php","nonce":"6fb868aa5b"};



var ajaxload_params = {"ajaxurl":"https:\/\/www.cio.com\/wp-admin\/admin-ajax.php","nonce":"9f5d76cee6","insider_archive":"https:\/\/www.cio.com\/nl\/insider\/","base_url":"https:\/\/register.idgcomm


_stq = window._stq || [];
_stq.push([ "view", {v:'ext',blog:'179690362',post:'4075672',tz:'-7',srv:'www.cio.com',hp:'vip',j:'1:12.8.2'} ]);
_stq.push([ "clickTrackerInit", "179690362", "4075672" ]);



(function(){
        //todo put somewhere common as needed elsewhere in other tickets.
        //look for the cookie for content pass
        const isContentPassCookiePresent = function () {
        


var nl_data = {"action_url":"https:\/\/www.cio.com\/nl\/newsletters\/signup","current_edition":"NL"};


jQuery("body").on("click","a[data-subtag], a[data-product], a[data-vars-product-id], a[data-domain-name]",function(a){var f=document.location.host.search(/lndo.site|go-vip.net|contentpass-develop/)!==

var article=document.querySelector("article");
if(article){var scrollThresholds=[.25,.5,.75,.9,1],trackedThresholds=new Set;window.addEventListener("scroll",function(){var b=article.getBoundingClientR

var editBodyLinks=document.querySelectorAll(".entry-content a:not([data-product]):not([data-vars-product-id]):not([data-subtag]):not([data-domain-name])");
editBodyLinks.forEach(function(c){c.addEvent

/*
 @preserve
 jquery.scrolldepth.js | v1.0
 Copyright (c) 2016 Rob Flaherty (@robflaherty)
 Licensed under the MIT and GPL licenses.
*/
(function(b){typeof define==="function"&&define.amd?define(["jq

jQuery(function(){jQuery.scrollDepth()});window.addEventListener("beforeunload",function(a){dataLayer.push({event:"pushOnUnload"})});

var heartbeatInterval=500,heartbeatTime=typeof heartbeatTime==="undefined"?0:heartbeatTime,pageIsVisible=!document.hidden,pageHasFocus=document.hasFocus();function startHearbeat(){window.timerInterval

(function(f){function d(a,b,k){(a=(a=a.getPlaylistItem())&&a.title?a.title:a.file)&&f.push({event:"jw_player_video",video_status:b,video_title:a.toLowerCase()})}f=f||[];if(typeof window.jwplayer==="fu

__tcfapi("addEventListener",2,function(a,b){console.log("__tcfapi eventListener for GA");!b||a.eventStatus!=="tcloaded"&&a.eventStatus!=="useractioncomplete"||(console.log("CMP Was interacted with, ca

(function(k,h,p){function r(){var a=[].slice.call(k.getElementsByTagName("iframe")).concat([].slice.call(k.getElementsByTagName("embed"))),b;for(b=0;b<a.length;b++){var d=u(a[b]);if(d){d=a[b];var c=h.

(function(){function b(){function d(){window._brandmetrics=window._brandmetrics||[];window._brandmetrics.push({cmd:"_loadsurvey"})}if(!c){c=!0;var a=consentManager.checkConsentByVendor("Brand Metrics"

Script

Open-Graph-Protocol

WordPress

Cloudflare Bot Management

MySQL

HSTS

Cloudflare

Google Analytics

YouTube

Google Tag Manager

Google

First-Party Tracking

⚠️ High Risk - https://www.cio.com/article/4075672/the-real-ai-risk-isnt-agi-its-unregulated-machine-identity.html

Requests	IP Address	Location	AS Autonomous System
13	143.204.98.116	United States	AS16509AMAZON-02
1	143.204.98.107	United States	AS16509AMAZON-02
1	2.16.241.13	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
1	216.58.212.132	United States	AS15169GOOGLE
1	216.239.34.36	United States	AS15169GOOGLE
1	216.239.32.36	United States	AS15169GOOGLE
1	142.250.184.200	United States	AS15169GOOGLE
1	142.250.181.238	United States	AS15169GOOGLE
1	143.204.98.125	United States	AS16509AMAZON-02
1	142.250.186.106	United States	AS15169GOOGLE
73	61	-	-

Security Scan Report: www.cio.com

Summary

AI Security Verdict

Safe Website

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies10

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History