identity management

Forgotten AI agents may still access sensitive company data

agentic AI, AI, credentials, cybersecurity, identity management, News, report /

Forgotten AI agents may still access sensitive company data 2026-10-26 at 07:30 By Anamarija Pogorelec AI agents that have not run recently retain credentials and connections to company systems, according to Arrakis Security’s 2026 Autonomous Agents Threat Report. About 76% of enabled agents examined had not run in 60 days, leaving access available through inactive […]

Forgotten AI agents may still access sensitive company data Read More »

Microsoft wants to limit AI agents’ permissions when they stray from the job

access controls, agentic AI, AI, cybersecurity, identity management, Microsoft, News, policy, security controls /

Microsoft wants to limit AI agents’ permissions when they stray from the job 2026-10-20 at 12:55 By Anamarija Pogorelec Microsoft’s Guardian Agents in Project Perception adapt as agent activity, risk, security context and organizational policy change. They help security teams understand why risk changed, investigate relevant evidence, recommend or apply containment measures and use what […]

Microsoft wants to limit AI agents’ permissions when they stray from the job Read More »

Palo Alto Networks and NVIDIA want tighter control over AI agents

agentic AI, AI, cybersecurity, identity management, News, NVIDIA, Palo Alto Networks /

Palo Alto Networks and NVIDIA want tighter control over AI agents 2026-09-29 at 13:21 By Anamarija Pogorelec Palo Alto Networks is expanding its work with NVIDIA to help companies control what AI agents can access and do. The collaboration covers agent activity, network traffic and identity management through NVIDIA’s Open Agent Safety Platform reference design. […]

Palo Alto Networks and NVIDIA want tighter control over AI agents Read More »

NIST and CISA finalize playbook to stop token theft and forgery

access management, CISA, cloud security, cybersecurity, guidelines, identity management, News, NIST, security controls, SSO /

NIST and CISA finalize playbook to stop token theft and forgery 2026-09-16 at 10:40 By Anamarija Pogorelec NIST and CISA have finalized guidelines to help federal agencies and cloud service providers (CSPs) protect identity and access tokens from forgery, theft, and misuse. The guidance, Protecting Tokens and Assertions from Forgery, Theft, and Misuse (NIST IR […]

NIST and CISA finalize playbook to stop token theft and forgery Read More »

AWS limits AI agents’ data access, even when manipulated

access controls, agentic AI, AI, AWS, cybersecurity, identity management, identity protection, News /

AWS limits AI agents’ data access, even when manipulated 2026-08-20 at 14:17 By Anamarija Pogorelec AWS has detailed an approach for propagating user authorization context through AI agents, allowing access controls to be enforced by infrastructure and downstream services rather than relying on the agent itself. Customers using Amazon Bedrock AgentCore can build AI agents […]

AWS limits AI agents’ data access, even when manipulated Read More »

Weak IAM affects up to 98% of cloud environments

access management, AWS, cloud security, cybersecurity, Google Cloud, identity management, Intruder, Microsoft Azure, News, report /

Weak IAM affects up to 98% of cloud environments 2026-08-14 at 08:00 By Anamarija Pogorelec Misconfiguration remains one of the leading threats to cloud environments because a single configuration error can result in public network access, unrotated keys, missing encryption, exposed services, and logging gaps. CISA now mandates baseline cloud configuration practices for US federal […]

Weak IAM affects up to 98% of cloud environments Read More »

Exposed credentials are giving attackers a head start many organizations don’t see

credentials, cybersecurity, Enzoic, identity management, MFA, News, report /

Exposed credentials are giving attackers a head start many organizations don’t see 2026-07-30 at 07:00 By Anamarija Pogorelec Compromised credentials can remain active long after passwords are created, leaving organizations trying to identify exposed accounts before attackers can use them. The 2026 Credential Risk Report from Enzoic shows growing awareness of the problem, but monitoring […]

Exposed credentials are giving attackers a head start many organizations don’t see Read More »

Anthropic’s Claude Tag gives AI agents independent identities

access management, agentic AI, AI, Anthropic, identity management, News /

Anthropic’s Claude Tag gives AI agents independent identities 2026-06-24 at 16:56 By Anamarija Pogorelec Anthropic introduced an agent identity model for Claude Tag, its AI assistant designed for team collaboration in shared workspaces. The model gives Claude its own identity, permissions, and tool access, configured by administrators and tied to a workspace or channel. Because […]

Anthropic’s Claude Tag gives AI agents independent identities Read More »

ETSI sets security requirements for AI data centers and cloud platforms

access management, AI, cybersecurity, ETSI, identity management, News, resilience, security standard /

ETSI sets security requirements for AI data centers and cloud platforms 2026-06-04 at 09:26 By Anamarija Pogorelec ETSI has published TS 104 033, a technical specification that defines security requirements for AI computing platforms. The specification establishes a security framework for platforms used to host AI applications in data center and edge computing environments, covering […]

ETSI sets security requirements for AI data centers and cloud platforms Read More »

Microsoft Entra pushes passkeys, tightens identity security

access management, authentication, credentials, identity management, Microsoft, Microsoft Entra ID, News /

Microsoft Entra pushes passkeys, tightens identity security 2026-06-02 at 15:47 By Anamarija Pogorelec Microsoft has released multiple identity and network access capabilities for Entra, its family of identity and network access products that help organizations implement a zero trust security strategy, over the last 30 days. Features reaching general availability Identity and authentication updates Phishing-resistant […]

Microsoft Entra pushes passkeys, tightens identity security Read More »

The CISO selling confidence in a market full of breach headlines

AI, CISO, cyber risk, cybersecurity, Don't miss, enterprise, Features, Hot stuff, identity management, identity protection, News, Risk Management, security operations, skill development, SOC, Span, strategy, tips /

The CISO selling confidence in a market full of breach headlines 2026-05-28 at 10:16 By Mirko Zorz Engineering teams across enterprise IT are writing their own software with AI coding assistants, spinning up agents that act on their behalf, and assigning those agents the same access privileges their human creators hold. The shift has pulled […]

The CISO selling confidence in a market full of breach headlines Read More »

What happens when security teams inherit identity

CISO, cybersecurity, Don't miss, Features, Hot stuff, identity, identity management, News, opinion, Span /

What happens when security teams inherit identity 2026-05-26 at 13:38 By Sinisa Markovic At the Span Cyber Security Arena conference, I sat down with Eric Woodruff, Chief Identity Architect at Semperis, to talk about how organizations perceive identity and the challenges those perceptions create for security. He shared his perspective on where organizations struggle with […]

What happens when security teams inherit identity Read More »

Manage machine identities: The hidden privileged access layer you need to manage

access management, AI, Delinea, Don't miss, Expert analysis, Expert corner, Hot stuff, identity management, News, Non Human Identities, opinion /

Manage machine identities: The hidden privileged access layer you need to manage 2026-05-26 at 08:37 By Help Net Security Why are machine identities becoming the majority of “things with access”? Every automation, integration, and workload needs a way to authenticate and the right permissions to act. That quiet requirement has created a massive population of […]

Manage machine identities: The hidden privileged access layer you need to manage Read More »

Over 70% of organizations hit by identity breaches

credentials, cybersecurity, identity management, News, Non Human Identities, Ransomware, report, Sophos /

Over 70% of organizations hit by identity breaches 2026-05-14 at 07:30 By Anamarija Pogorelec Attackers rely on stolen credentials, compromised service accounts, and social engineering attacks targeting employees, according to Sophos’ The State of Identity Security 2026 survey. What do you estimate to be the overall cost to your organization to rectify the identity breach? […]

Over 70% of organizations hit by identity breaches Read More »

Machine identities outnumber humans 109 to 1

AI, cybersecurity, identity management, identity protection, News, Palo Alto Networks, regulation, report /

Machine identities outnumber humans 109 to 1 2026-05-14 at 07:00 By Anamarija Pogorelec Organizations manage an average of 109 machine identities for every human identity. AI agents account for a growing share of those identities, with companies expecting AI agent growth of 85% over the next 12 months. Machine identities are projected to increase by […]

Machine identities outnumber humans 109 to 1 Read More »

Your IAM was built for humans, AI agents don’t care

access management, AI, authentication, Curity, cybersecurity, Expert analysis, identity management, News, Non Human Identities, opinion /

Your IAM was built for humans, AI agents don’t care 2026-04-27 at 11:18 By Help Net Security Identity and access management was built for a simpler world. One where the hardest problem was a human logging in, and where “Who are you?” was sufficient to decide what someone could do. That model served enterprises well […]

Your IAM was built for humans, AI agents don’t care Read More »

Bringing governance and visibility to machine and AI identities

AppViewX, Artificial Intelligence, Compliance, cybersecurity, Don't miss, Features, Hot stuff, identity management, identity protection, News, RSAC 2026 /

Bringing governance and visibility to machine and AI identities 2026-04-13 at 07:32 By Mirko Zorz In this Help Net Security interview, Archit Lohokare, CEO of AppViewX, explains how the rise of AI marked a turning point where machine and AI agent identities began converging into a single problem. Drawing on his experience across IBM and […]

Bringing governance and visibility to machine and AI identities Read More »

Oracle issues emergency fix for pre-auth RCE in Identity Manager (CVE-2026-21992)

API security, Don't miss, enterprise, Hot stuff, identity management, News, Oracle, vulnerability /

Oracle issues emergency fix for pre-auth RCE in Identity Manager (CVE-2026-21992) 2026-03-23 at 13:50 By Zeljka Zorz Oracle has released an out-of-band patch for a critical and easily exploitable vulnerability (CVE-2026-21992) in Oracle Identity Manager and Oracle Web Services Manager. The company did not say whether the vulnerability has been exploited as a zero-day, but […]

Oracle issues emergency fix for pre-auth RCE in Identity Manager (CVE-2026-21992) Read More »

Why workforce identity is still a vulnerability, and what to do about it

1Kosmos, auditing, authentication, cybersecurity, Don't miss, Hot stuff, identity management, identity verification, News, opinion /

Why workforce identity is still a vulnerability, and what to do about it 2026-03-04 at 07:43 By Help Net Security Most organizations believe they have workforce identity under control. New hires are verified. Accounts are provisioned. Multi-factor authentication is enforced. Audits are passed. Then a breach happens, often through an account that was “properly secured.” […]

Why workforce identity is still a vulnerability, and what to do about it Read More »

AI agents behave like users, but don’t follow the same rules

access controls, agentic AI, Artificial Intelligence, Cloud Security Alliance, cybersecurity, identity management, News, report /

AI agents behave like users, but don’t follow the same rules 2026-02-09 at 08:19 By Anamarija Pogorelec Security and governance approaches to autonomous AI agents rely on static credentials, inconsistent controls, and limited visibility. Securing these agents requires the same rigor and traceability applied to human users, according to Cloud Security Alliance’s Securing Autonomous AI […]

AI agents behave like users, but don’t follow the same rules Read More »

Scroll to Top