Steven Sinofsky and Aaron Levie on the assumption behind enterprise security: people do the right thing 99% of the time, and agents are about to break it. Steven: "What AI can do is try all of those things in a very short time. It doesn't get tired. It doesn't get bored." "You now have to look at every single API and every single service you're running internally on your network." "Nobody thinks their internal GitHub, internal Slack, or internal finance expense tool is vulnerable to a denial-of-service attack. But swarms literally look like a denial-of-service attack." "Now we need a whole layer internally that is tracking way more about what authentications are being done and what APIs are being done." Aaron: "You kind of got by with information security on the fact that most people will do the right thing 95% to 99% of the time." "All these systems are basically open to whoever wants to access them, or one tap on the shoulder and then you have access." "Agent swarms completely flip that because these are roaming drones, times 10,000. They don't get bored. They will easily mistake a good task for a bad one and vice versa. The data security in our systems is going to have a huge upgrade moment." @stevesi @levie