Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
386 matching stories — in Non-Human Identity & Secrets — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
8 min readOver a few weeks in September, three security vendors launched “kill switches” for AI agents. California’s governor ordered state officials to study requiring one. And a bipartisan bill has been introduced in Congress called the AI Kill Switch Act. Everyone, it seem, is talking about kill switches. Far fewer agree on what one is, or […] The post What Is an AI Kill Switch? Where It Lives Decides Whether It Works appeared first on Aembit.
Defakto is helping set the standard for secure, interoperable non-human identity and access without long-lived credentials PALO ALTO, Calif. – October 20, 2026 – Defakto Security, the non-human identity and access management company for the enterprise, has joined the OpenID Foundation as a Sustaining Corporate Member alongside Cisco, Okta, and other technology leaders to shape …
Summary AI security discussions often focus on prompt injection, model vulnerabilities, and patching. But one of the most immediate risks is much more familiar: compromised credentials. AI agents require credentials to access enterprise systems and can also discover credentials exposed elsewhere. Because agents operate at machine speed and scale, even short-lived credentials can provide enough […] The post The Myth of the Solved Secret: Why Credentials Are AI’s Most Dangerous Vulnerability
Non-human identities now outnumber humans 45 to 1. Discover why AI-driven enterprises face escalating security risks from unmanaged machine credentials and how to secure them.
3 min readOnce an AI agent is authorized to connect to an MCP server, it can see and call every tool that server exposes. That’s fine when a server does one narrow job. But most real-world MCP servers – GitHub, Slack, Jira, internal platforms – bundle dozens of tools together, and not all of them carry the […] The post Introducing MCP Tool Filtering: Fine-Grained, Least-Privilege Authorization for AI Agents appeared first on Aembit.
The cloud landscape is shifting beneath our feet. GPU-powered infrastructure is no longer a niche concern—it’s becoming the backbone of enterprise innovation. And with that shift comes an identity and governance crisis that most organizations are barely prepared to handle. The challenge? It’s no longer just about managing human access. It’s about managing both human […] The post Veza from ServiceNow: Comprehensive Identity Security for NeoClouds appeared first on Veza.
The credential-theft campaign known as GhostAction has ramped up, targeting more than 30,000 repositories across 3,000 users and organizations. The spike, according to GitGuardian, was observed on October 8 and 9, 2026. "This resulted from compromising the GitHub accounts of about 1,900 users. It attempted to extract 3,174 secrets from public repositories' CI," security researchers Gaetan
Threat actors are exploiting a critical security flaw in Langflow, according to an alert from Previdian. Langflow is an open-source platform that allows developers to build artificial intelligence (AI) applications and agentic workflows. In February 2025, DataStax, the parent company of Langflow, was acquired by IBM. The vulnerability in question is CVE-2026-105740 (CVSS score: 9.9), a case of
Summary: AI agent security requires controls that govern what agents actually do, even when they have legitimate access. A new Gartner report makes the case for independent runtime authorization that evaluates agent actions as they happen. Here’s why traditional identity and secrets management fall short, and how Akeyless Agentic Runtime Authority addresses the gaps. On […] The post Gartner on AI Agent Security: The Case for Runtime Authorization appeared first on Akeyless.
Every conversation I have about AI agents eventually lands on the same question. Not “which model?” Not “what’s the prompt?” What can it touch? If a prompt injection lands, the damage stops where the agent’s credentials stop. The blast radius of an AI agent is its keyring, and the access graph is how you see […] The post Follow the Key: What an AI Agent’s Access Graph Reveals appeared first on Hush Security.
Hush Entitlements adds access context to every NHI and AI agent Finding an AI agent is only the beginning. Agents don’t work alone. They reach your cloud services, data, and infrastructure through credentials and non-human identities (NHIs), and the access granted to those identities determines how far an agent can go. An agent with read […] The post You Found the Agent. Now Find Out What It Can Do. appeared first on Hush Security.
Hush Entitlements adds access context to every NHI and AI agent Finding an AI agent is only the beginning. Agents don’t work alone. They reach your cloud services, data, and infrastructure through credentials and non-human identities (NHIs), and the access granted to those identities determines how far an agent can go. An agent with read […] The post You Found the Agent. Now Find Out What It Can Do. appeared first on Hush Security.
8 min readAn agent that can read your inbox, use a browser, and work while you sleep changes the meaning of “signed in.” A session that once represented a person clicking through an application may now support software making decisions and taking actions for hours. Consider a simple request: prepare a customer briefing. The agent might read […] The post 10 Questions to Ask Before Deploying Personal or Desktop AI Agents appeared first on Aembit.
Speed, cost, and adaptability change—but not the underlying need to gain access.The post 5 cybersecurity assumptions AI attacks break appeared first on Silverfort.
The top PAM solutions in 2026 include Akeyless, CyberArk, BeyondTrust, Delinea, Keeper, and Teleport. Buyers should compare platforms based on deployment architecture, just-in-time (JIT) access and Zero Standing Privilege (ZSP), support for human and non-human identities, audit and compliance capabilities, and operational overhead. Modern PAM increasingly extends beyond password vaulting to identity-driven, temporary privileged access across hybrid, multi-cloud, DevOps, machine, and AI environme
Today, Silverfort announces an integration that brings its runtime Identity Security approach to Agent Gateway, part of Google Cloud Gemini Enterprise, giving teams real-time visibility into AI agent activity and enforcing access decisions as they happen. After Silverfort was named in Google Cloud’s Next ’26 announcement among the partner services bringing identity and governance administration […]The post Silverfort Secures AI Agents on Google Cloud in Runtime with Agent Gateway Integrati
As enterprises race to deploy autonomous AI agents to accelerate business, a new report reveals they are tethered to security architectures built for a different era. The "Horizons of Identity Security" report from SailPoint highlights a critical “velocity paradox,” in which organizations invest in AI-speed business operations while continuing to rely on human-speed security controls, creating a
Non-human identities (NHIs)—service accounts, application identities, API keys—have become the most prevalent identity types across corporate environments. They also tend to behave differently from the humans they serve. A person might log in from home, a coffee shop, an airport, and three different countries in a single month. A service principal that authenticates your third-party […]The post Making native geofencing work for cloud non-human identities appeared first on Silverfort.
Every modern enterprise depends on credentials. This is how humans, systems, and now AI, all connect to data, services, and each other securely. GitGuardian helps secure that credential layer through three connected capabilities: Detect, Remediate, and Prevent. The journey starts with detection, because organizations first need to understand what credentials exist, where they live, and what they
In early June 2026, an AI-driven operator tracked as JadePuffer (Microsoft: Storm-3168) used two compromised Azure service principals to map a tenant, then made 100+ storage account deletion attempts in about seven minutes. Most succeeded. There was no malware and no exploit inside Azure. Every action was a normal Azure Resource Manager call, allowed by roles the identities already held. We walk the full chain — the 16-hour recon window, the inherited RBAC that gave it the blast radius, and the
AI coding agents are changing how quickly developers can build and ship software as well as how quickly credentials can become exposed. According to GitGuardian’s 2026 State of Secrets Sprawl Report, commits identified as AI-assisted are leaking secrets at approximately twice the rate of human-written ones. Most of the fastest-growing categories of leaked credentials are now connected to AI
Cybersecurity researchers have disclosed Go-based malware distributed via two Go Modules and two Terraform providers, marking the first time threat actors are using the centralized repository hosted by HashiCorp as a distribution vector for malicious payloads. According to Aikido, the list of Terraform providers and Go modules is below - gocommunity-io/dockerd (222 downloads) kreuzwenker/
Thales unveils HexaForce: AI-powered, sovereign command and control for NATO and allied nations prezly Thu, 09/17/2026 - 11:00 Group Investor relations Defence Share options Facebook X Whatsapp Linkedin Email URL copied to clipboard 17 Sept 2026 Built on an open, interoperable architecture co-designed with armed forces, HexaForce was successfully tested during NATO CWIX 2026.HexaForce is tailored for high-intensity warfare, supporting command requirements for over 100,000 personnel where operati
If you are researching Formal.ai alternatives, you have probably noticed the search results are unhelpful — most of them are about form builders and sales compensation software. This page is about the security company: Formal.ai, the protocol-aware proxy that sits inline between identities and data stores.Formal is a good product for a specific problem. It is not the right product for every problem that gets described as "securing AI agent access," and the alternatives differ from it more than t
Pomerium vs Formal.ai: Agentic Access Control ComparedYour AI agents are in production, and something has to decide what they are allowed to do. Two proxies come up in that evaluation, and teams comparing Pomerium vs Formal.ai usually discover partway through that they are not evaluating the same category of product.Formal.ai is a protocol-aware proxy that inspects and rewrites the contents of database queries and tool calls. Pomerium is an context-aware proxy that authenticates every actor and
An AI agent needs to read from your production database. Something has to stand between them. The market offers two architecturally distinct answers to that requirement, and the difference between a data-layer proxy and an context-aware proxy determines which failures you can actually prevent. Both deploy inline. Both enforce least privilege. Both are now marketed with the vocabulary of AI agent security. Underneath, one of them reads the contents of your queries and the other reads the identity
