Skip to content
Logic Tribune LT markLTLogicTribune

Public questions about intelligent systems.

Agent workflows

Mastercard executive flags data-in-use protection gap for AI agents on Kubernetes

Cloud engineering teams at financial firms face security challenges that encryption alone cannot solve as AI agents move to production.

Depth
1 outlet · newest source 94h ago
Mastercard executive flags data-in-use protection gap for AI agents on Kubernetes

Key points

  • Mastercard runs AI agents on Red Hat OpenShift, using Kubernetes for elastic scaling.
  • Krishna Mayuram states that protecting data while it is being processed is now central to operations.
  • Confidential computing aims to secure data in use within virtualised environments, addressing gaps in rest and motion protection.

Krishna Mayuram, senior principal engineer at Mastercard, told theCUBE Research that cloud engineering teams at financial companies face a security problem encryption alone cannot solve. This issue arises as AI agents move into production on Kubernetes, where container orchestration has become the default foundation for AI workloads.Krishna Mayuram identifies the data-in-use protection gap for Kubernetes-based AI agents as the critical security challenge for financial cloud engineering teams.

The facts

SiliconANGLE reported that the data these agents use is now the main target. Mayuram explained that payment networks feel this pressure more than most because every transaction carries customer data and regulatory exposure. Protecting data while it is being processed, not just while stored or moving, has become central to running agents at scale.

Evidence: reportedAI agents carry memory and storage like people, so their data needs guarding while in use

aifleet-siliconangle

The facts

Red Hat has also brought confidential containers to OpenShift on bare metal. Mayuram noted that agents act like microservices and require the same elastic infrastructure capabilities, including horizontal and vertical scaling.

What to make of it

Mayuram described confidential computing as launching applications in highly secure, virtualised environments to protect data in use. He asked what happens to data in use after organisations have protected data at rest and in motion. Scale increases risk, especially for a company operating under many countries’ laws.

In practice

Cloud engineering teams at financial companies must address security problems that encryption alone cannot solve. Access to this protection involves using highly secure, virtualised environments or confidential containers. Availability depends on the underlying platform’s ability to provide these secure environments.

Why it matters

  • Financial sector engineers are prioritising data-in-use protection because every transaction carries regulatory exposure.
  • Kubernetes provides the necessary elastic scaling for AI agents, but this scale increases security risk.
  • Confidential computing is being positioned as the solution for securing data while it is actively being processed.
  • Guardrails must encompass different laws across distributed industries, applying equally to agents and regular applications.

Topics: Kubernetes, confidential computing, AI agents, security, Mastercard

Updated

For readers

Developers

  • Kubernetes provides horizontal and vertical scaling for AI agents
  • Agents act like microservices requiring elastic infrastructure

Business

  • Protecting data in use is central to running agents at scale
  • Guardrails must encompass different laws across distributed industries

Policy

  • Every transaction carries customer data and regulatory exposure
  • Confidential computing aims to secure data within virtualised environments

Ask the article

Local keyword search of this article; no generated answers.

Did this article give you the evidence you needed?

No vote saved on this device.
Your choice stays on this device. No public tally.

Questions readers ask

How do AI agents differ from traditional apps in terms of infrastructure needs?

Mayuram stated that agents act like microservices and require the same elastic capabilities of Kubernetes for scaling.

What is confidential computing according to the source?

It is launching applications in highly secure, virtualised environments to protect data while it is in use.

Why are payment networks facing particular pressure?

Every transaction carries customer data and regulatory exposure, making data protection critical.

Connected stories

This storyGoogle donates agent sandboxing project to CNCFGoogle donates agent sandboxing 70% plan AI agents but Oracle says security patches block production70% plan AI agents but Oracle saOpenAI partners with Hacktron to test third-party service connectionsOpenAI partners with Hacktron toOpenInference standards enable 60-minute eval pipelines for multi-turn agents via Gemini Enterprise and ADKOpenInference standards enable 6

Reading receipt

  • Mastercard runs AI agents on Red Hat OpenShift, using Kubernetes for elastic scaling.
  • Krishna Mayuram states that protecting data while it is being processed is now central to operations.
  • Confidential computing aims to secure data in use within virtualised environments, addressing gaps in rest and motion protection.

Still open: How widely available are confidential containers on bare metal for non-financial sectors?

Still open: What specific guardrails are needed for agentic commerce beyond standard development practices?

Time spent: 0:00 · Depth: Full

Sources

  1. SiliconANGLE AI

Related stories

Background reading