--- title: Cisco Rethinks Privileged Infrastructure Access | daily.dev description: Cisco is launching Privileged Infrastructure Access, a product that replaces standing admin credentials with short-lived, identity-bound sessions for network... canonical: https://daily.dev/posts/cisco-rethinks-privileged-infrastructure-access-ubz5lgohs twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Cisco Rethinks Privileged Infrastructure Access | daily.dev og:description: Cisco is launching Privileged Infrastructure Access, a product that replaces standing admin credentials with short-lived, identity-bound sessions for network... og:url: https://daily.dev/posts/cisco-rethinks-privileged-infrastructure-access-ubz5lgohs og:image: https://api.daily.dev/og/posts/UbZ5LgOhs.png og:image:alt: Cisco Rethinks Privileged Infrastructure Access og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Cisco Rethinks Privileged Infrastructure Access **[Cisco](https://daily.dev/sources/cisco)** · 5 min read · 0 upvotes · 0 comments ## Summary Cisco is launching Privileged Infrastructure Access, a product that replaces standing admin credentials with short-lived, identity-bound sessions for network infrastructure. Access is granted just in time, scoped to the task, and expires when the work is done, with a full record of what happened. It starts with customers using Cisco ISE and TACACS+ to govern access to Cisco routers and switches, then extends to servers, Kubernetes clusters, and cloud resources. The same model applies to humans, AI agents, and automation scripts, attributing every action to the actor that performed it. The Hugging Face incident, where an autonomous AI agent chained weaknesses using overly broad credentials, is cited as a recent example of how the threat has shifted. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### What happened in the Hugging Face security incident involving an AI agent? An autonomous AI agent chained together ordinary weaknesses across production infrastructure, exploited overly broad credentials, and operated at a scale no human operator could sustain, according to Cisco's description of the incident. Cisco cites this as evidence that standing credentials and disconnected policy have become dangerous as AI-driven attacks grow cheaper and faster. _Teams rethinking credential exposure after agent-driven breaches can track infrastructure identity approaches on daily.dev._ ### How does Cisco Privileged Infrastructure Access limit access for AI agents on network devices? It grants humans, delegated AI agents, and automation scripts only task-specific, short-lived privileges that expire once the work is complete, with every action attributed to the actor that performed it. Agents do not inherit broad standing access just because they operate quickly; it starts with Cisco ISE and TACACS+ governed devices and extends to servers, Kubernetes, and cloud resources. _Engineers designing least-privilege access for AI agents can follow approaches like this on daily.dev._ ## Similar posts on daily.dev - [Rethinking identity for the AI era: CISOs must build trust at machine speed](https://daily.dev/posts/rethinking-identity-for-the-ai-era-cisos-must-build-trust-at-machine-speed-xxyz5clxv) · CSO Online · 0 upvotes · 0 comments - [The New Insider Threat: Autonomous Systems With Excessive Permissions](https://daily.dev/posts/the-new-insider-threat-autonomous-systems-with-excessive-permissions-mriupbnvt) · Security Boulevard · 2 upvotes · 1 comments - [“A dangerous combination”: The 2 factors than can “corrupt” AI agent workflows](https://daily.dev/posts/a-dangerous-combination-the-2-factors-than-can-corrupt-ai-agent-workflows-oktjh2dk0) · The New Stack · 0 upvotes · 0 comments - [AI Agents Are Privileged Users; Who Is Auditing Their Access?](https://daily.dev/posts/ai-agents-are-privileged-users-who-is-auditing-their-access--gprca2dhv) · Dark Reading · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#ai-agents](https://daily.dev/tags/ai-agents), [#authentication](https://daily.dev/tags/authentication), [#cisco](https://daily.dev/tags/cisco) [View this post on daily.dev](https://daily.dev/posts/cisco-rethinks-privileged-infrastructure-access-ubz5lgohs) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Cisco Rethinks Privileged Infrastructure Access","url":"https://daily.dev/posts/cisco-rethinks-privileged-infrastructure-access-ubz5lgohs","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/cisco-rethinks-privileged-infrastructure-access-ubz5lgohs"},"datePublished":"2026-10-26T20:03:20.450Z","dateModified":"2026-10-26T20:13:23.938Z","description":"Cisco is launching Privileged Infrastructure Access, a product that replaces standing admin credentials with short-lived, identity-bound sessions for network...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/b07327d8304ccd3e50caf4f54a50de08?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/b07327d8304ccd3e50caf4f54a50de08?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Cisco","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Cisco","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/68b8a8be17184235a5067d7c84162f77","url":"https://daily.dev/sources/cisco"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/cisco-rethinks-privileged-infrastructure-access-ubz5lgohs","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,ai-agents,authentication,cisco","timeRequired":"PT5M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Cisco","item":"https://daily.dev/sources/cisco"},{"@type":"ListItem","position":3,"name":"Cisco Rethinks Privileged Infrastructure Access"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/cisco-rethinks-privileged-infrastructure-access-ubz5lgohs#faq","mainEntity":[{"@type":"Question","name":"What happened in the Hugging Face security incident involving an AI agent?","acceptedAnswer":{"@type":"Answer","text":"An autonomous AI agent chained together ordinary weaknesses across production infrastructure, exploited overly broad credentials, and operated at a scale no human operator could sustain, according to Cisco's description of the incident. Cisco cites this as evidence that standing credentials and disconnected policy have become dangerous as AI-driven attacks grow cheaper and faster. Teams rethinking credential exposure after agent-driven breaches can track infrastructure identity approaches on daily.dev."}},{"@type":"Question","name":"How does Cisco Privileged Infrastructure Access limit access for AI agents on network devices?","acceptedAnswer":{"@type":"Answer","text":"It grants humans, delegated AI agents, and automation scripts only task-specific, short-lived privileges that expire once the work is complete, with every action attributed to the actor that performed it. Agents do not inherit broad standing access just because they operate quickly; it starts with Cisco ISE and TACACS+ governed devices and extends to servers, Kubernetes, and cloud resources. Engineers designing least-privilege access for AI agents can follow approaches like this on daily.dev."}}]} ```