Starting in late December 2025, a single attacker convinced Claude Code that a hacking campaign against nine Mexican government agencies and a financial institution was an authorized penetration test. The account was real and properly authenticated throughout: the attacker never stole any credentials and never had to break an authentication check to make any of […] The post Beyond Identity – Agentic AI Requires Governing Actions and Behavior appeared first on Cequence Security .