--- title: TCS+ | Specops’ Darren James on continuous trust in an... description: Traditional identity-based security controls — passwords, MFA, zero-trust initiatives — are failing because attackers increasingly exploit legitimate... canonical: https://daily.dev/posts/tcs-specops-darren-james-on-continuous-trust-in-an-ai-world-g5mzs2i4i twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: TCS+ | Specops’ Darren James on continuous trust in an AI world | daily.dev og:description: Traditional identity-based security controls — passwords, MFA, zero-trust initiatives — are failing because attackers increasingly exploit legitimate... og:url: https://daily.dev/posts/tcs-specops-darren-james-on-continuous-trust-in-an-ai-world-g5mzs2i4i og:image: https://api.daily.dev/og/posts/G5MZs2I4i.png og:image:alt: TCS+ | Specops’ Darren James on continuous trust in an AI world og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # TCS+ | Specops’ Darren James on continuous trust in an AI world **[TechCentral](https://daily.dev/sources/techcentral)** · 2 min read · 0 upvotes · 0 comments ## Summary Traditional identity-based security controls — passwords, MFA, zero-trust initiatives — are failing because attackers increasingly exploit legitimate credentials rather than technical vulnerabilities. Darren James of Specops Software argues that verifying identity at login is no longer sufficient; access decisions must continuously account for device posture, session context, and behavioral signals. The discussion walks through a real-world breach escalation and reframes zero trust as an ongoing process. It also addresses emerging pressures from AI-driven automated attacks and non-human identities like service accounts and AI agents. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### Why do zero-trust and MFA implementations still fail to prevent breaches? Zero-trust and MFA fail when attackers obtain legitimate credentials, because identity-based controls only verify who is logging in, not whether that access should remain trusted throughout a session. An intruder holding valid credentials looks identical to an authorised user and can operate undetected. Effective defence requires continuous evaluation of device posture, session context, and behavioural signals — not just a one-time authentication event. _Security teams rethinking access control strategy track this shift from identity to continuous trust on daily.dev._ ## Similar posts on daily.dev - [Rethinking identity for the AI era: CISOs must build trust at machine speed](https://daily.dev/posts/rethinking-identity-for-the-ai-era-cisos-must-build-trust-at-machine-speed-xxyz5clxv) · CSO Online · 0 upvotes · 0 comments - [Closing the Identity Gaps in Critical Infrastructure Security](https://daily.dev/posts/closing-the-identity-gaps-in-critical-infrastructure-security-irguezhxd) · BleepingComputer · 0 upvotes · 0 comments - [Zero Trust in the Age of AI: Why the Classic Model Isn’t Enough Anymore](https://daily.dev/posts/zero-trust-in-the-age-of-ai-why-the-classic-model-isn-t-enough-anymore-j66ljlvyr) · Security Boulevard · 1 upvotes · 0 comments - [The Day-One Hole in Zero Trust Architecture](https://daily.dev/posts/the-day-one-hole-in-zero-trust-architecture-6rumck7tw) · BleepingComputer · 0 upvotes · 0 comments - [Your Next Breach Will Look Like Business as Usual](https://daily.dev/posts/your-next-breach-will-look-like-business-as-usual-ftua7lovf) · Dark Reading · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#authentication](https://daily.dev/tags/authentication) [View this post on daily.dev](https://daily.dev/posts/tcs-specops-darren-james-on-continuous-trust-in-an-ai-world-g5mzs2i4i) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"TCS+ | Specops’ Darren James on continuous trust in an AI world","url":"https://daily.dev/posts/tcs-specops-darren-james-on-continuous-trust-in-an-ai-world-g5mzs2i4i","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/tcs-specops-darren-james-on-continuous-trust-in-an-ai-world-g5mzs2i4i"},"datePublished":"2026-08-07T09:20:05.402Z","dateModified":"2026-08-07T09:20:29.944Z","description":"Traditional identity-based security controls — passwords, MFA, zero-trust initiatives — are failing because attackers increasingly exploit legitimate...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/00a0791d847492b78caf54536405e477?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/00a0791d847492b78caf54536405e477?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"TechCentral","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"TechCentral","logo":"https://media.daily.dev/image/upload/s--RsqLDZrL--/f_auto/v1717745297/logos/techcentral","url":"https://daily.dev/sources/techcentral"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/tcs-specops-darren-james-on-continuous-trust-in-an-ai-world-g5mzs2i4i","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,authentication","timeRequired":"PT2M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"TechCentral","item":"https://daily.dev/sources/techcentral"},{"@type":"ListItem","position":3,"name":"TCS+ | Specops’ Darren James on continuous trust in an AI world"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/tcs-specops-darren-james-on-continuous-trust-in-an-ai-world-g5mzs2i4i#faq","mainEntity":[{"@type":"Question","name":"Why do zero-trust and MFA implementations still fail to prevent breaches?","acceptedAnswer":{"@type":"Answer","text":"Zero-trust and MFA fail when attackers obtain legitimate credentials, because identity-based controls only verify who is logging in, not whether that access should remain trusted throughout a session. An intruder holding valid credentials looks identical to an authorised user and can operate undetected. Effective defence requires continuous evaluation of device posture, session context, and behavioural signals — not just a one-time authentication event. Security teams rethinking access control strategy track this shift from identity to continuous trust on daily.dev."}}]} ```