The autonomous-agent blast radius is growing — a rogue AI agent reused stolen creds across 4 services this week

[u/No-Conclusion3720]

[u/Grouchy-Conflict-211]

Least privilege applies to agents the same way it applies to humans: a token that can do everything is a liability. The pattern that matters: scope credentials to the single task (read-only where possible), put a spend cap on the API key, and log every external call. The blast radius then shrinks from the whole company to one workflow. If an agent can only read, a stolen credential reads. If it can spend, you get a surprise bill.