Proofpoint's threat research team reported that attackers exploited OAuth client ID spoofing to enumerate Microsoft Entra ID accounts without successful sign-ins, with two campaigns using fabricated a…
Wiz Research disclosed CosmosEscape, a chained vulnerability in Azure Cosmos DB's Gremlin API that allowed a researcher to execute arbitrary code on the shared Gateway and retrieve the primary key for…
Vercel Passport reached general availability on July 31, 2026, gating internal apps and AI agents behind a company's own identity provider, including Okta, Microsoft Entra ID, Auth0, or any OpenID Con…
Okta announced Thursday it has signed a deal to buy Permiso Security, a cloud-based firm specializing in identity threat detection and response, to merge real-time threat detection with identity secur…
NorthStar Anesthesia, which manages anesthesia staffing for 3,000 clinicians across 25+ U.S. states, built a mobile scheduling app in weeks using Databricks Apps after a dashboard pilot failed due to …
Best Buy implemented Google Cloud's Workforce Identity Federation to scale AI workloads and secure access for tens of thousands of users, eliminating service account key management by federating exist…
Microsoft announced that passkeys will become the default authentication method in Microsoft Entra ID, transitioning from SMS and voice authentication beginning September 1, 2026, to combat AI-driven …
Microsoft Entra ID will make passkeys the default phishing-resistant authentication method starting September 1, 2026, and will retire native SMS and voice authentication on February 1, 2027, citing A…
AgentGateway, the Rust-based AI proxy from the AI Agent Infrastructure Foundation, now supports RFC 8693 OAuth 2.0 Token Exchange to securely delegate user identity to AI agents. The feature replaces …
The platform team at DNB, Norway's largest financial services group, scaled AI adoption without adding headcount by building an agentic platform using kagent and agentgateway. The architecture connect…
Anthropic launched the Claude Apps Gateway, a self-hosted control plane for Claude Code on AWS that replaces scattered API credentials with corporate SSO and real-time spend controls. The gateway sits…
Microsoft Entra ID introduces Conditional Access policies for AI agent identities, enabling organizations to enforce governance based on agent classification and custom security attributes. The approa…
Microsoft Entra ID custom security attributes can serve as a governance metadata layer for AI agents, enabling attribute-driven policies instead of manual per-agent management. By defining attributes …
GitHub added Kimi K2.7 Code, an open-weight 1-trillion-parameter model by Beijing-based Moonshot AI, to the Copilot model picker on July 1 for Pro users and July 7 for Business and Enterprise. The mod…
AWS and Anthropic launched the Claude Apps Gateway for Amazon Bedrock and Google Cloud, a self-hosted control plane that gives enterprises centralized management of Claude Code deployments with SSO, s…
Cloud security in 2026 is being reshaped by rapid adoption of zero-trust architecture and a growing focus on quantum-safe encryption, driven by advanced AI, autonomous agents, and the quantum computin…
An Azure AI agent passed all functional, retrieval, and safety tests but still requires human approval before executing actions. The developer refused full autonomy because enterprise accountability m…
Varonis Threat Labs researchers Doron Kapah and Mark Vaitsman launched Breach at the Beach, a Capture The Flag (CTF) training experience designed to teach security practitioners how to detect and resp…
A new pattern called the Verified Identity Agent Bridge (VIAB) solves the problem of preserving human identity when bridging consumer AI platforms to enterprise agents. The bridge verifies the human a…
Databricks announced new security and compliance capabilities at Data + AI Summit 2026, including General Availability of Automatic Identity Management (AIM) for Microsoft Entra ID on AWS and GCP, Pub…