The Perimeter Moved to the Laptop: From Network, to Identity, to the Developer Endpoint

The article argues that the security perimeter has migrated from the network to identity and now to developer endpoints, where cloud keys, SSH keys, API tokens, and AI-agent secrets accumulate on disk; attackers and malicious supply-chain packages can harvest these local credentials (examples cited include the s1ngularity and Shai-Hulud incidents) giving them legitimate access to cloud accounts, source control, and SaaS — so the missing control is discovery and inventory of credentials on endpoints.