Autonomous telecom networks change the shape of the security problem. Agentic workloads move across models, tools, data stores, agents and infrastructure, carrying sensitive network intelligence with them. Paolo Campoli examines why protecting the infrastructure is no longer enough when the workload itself is designed to move.

Rome's roads made the empire powerful by reducing the friction of distance, but the same infrastructure could be used by forces moving against it. Enterprise AI presents a modern version of that trade-off, concentrating in one environment the knowledge that was once scattered safely across separate systems.

Enterprises are making an increasingly unbalanced tradeoff with AI: proprietary knowledge is exposed to more infrastructure in exchange for capabilities that are becoming essential to compete. As AI concentrates valuable information into models and active computing environments, the potential cost of that tradeoff grows, demanding a fundamentally different security architecture.

Nadella calls it the Reverse Information Paradox: enterprises pay for AI twice, once in models and infrastructure, again in the proprietary knowledge they hand over each time they use it. But the root problem isn't economic, it's architectural: AI turns decades of security thinking on its head, forcing knowledge to become visible before it can be used.

Researchers at KAIST demonstrated that AI model architectures can be reconstructed remotely through electromagnetic emissions from GPUs. ModelSpy exposes a growing gap in AI infrastructure security: confidential computing protects software boundaries, but not physical leakage. As sovereign AI and confidential AI accelerate, encrypted execution may become the next critical layer of AI defense.

The LiteLLM incident was a reminder that modern AI breaches often begin with the software supply chain. Once credentials are exposed, the real problem becomes control over access, environments, and downstream systems. That is where the blast radius grows, even when core assets remain protected.