credentials

Leaked keys remain one of the commonest breach causes, and agents create new places to leak them. The scored answer prefers no secret at all, then short-lived ones, and keeps them out of every model context.

Two things make Windows compromise spread: services that run with powerful identities, and a process that holds the credentials of everyone logged on.

One link-local address hands out the machine's credentials to anything that can make a request from it. That includes a fooled agent with a fetch tool.

Crypto miners steal your compute. LLMjackers steal your model quota and resell it, and the first alert is often the bill.

Distinguish profile, device and account boundaries, then bind UI actions to the intended app, recipient and effect. Screenshots and accessibility trees provide observations, not trusted authorization.

Respond to a suspected credential exposure without testing it against an excluded service. Preserve restricted evidence and coordinate owner-led containment.