Devices used to mean laptops and phones. Now they mean containers, microservices, and AI agents that can act on their own. This week's Zero Trust Foundations post runs the AAVI model through the Device pillar, with real 2026 breach headlines showing what happens when device and workload trust gets skipped, whether the "device" in question has a keyboard or not.

Zero Trust is one of the clearest signals that we’re moving past the expectation that standards will provide the roadmap for implementation. In a Zero Trust world, ‘minimum requirements’ are not a destination. They are a baseline. They tell you where the floor is, not where the ceiling should be. And no longer can we rely on what we defined on Monday being adequate for what may happen on Friday

Modern auth + MFA everywhere. Short-lived tokens. No more “easy paths.” Grab a cup of coffee with me for a minute, because this is one of those security conversations that feels “technical”… right up until it becomes the headline nobody wanted. One of the fastest ways Zero Trust fails is through legacy authentication protocols that are still quietly enabled “for compatibility.” They were designed for a different era, static credentials, limited context, minimal verification,