Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
371 matching stories — announcement, in Non-Human Identity & Secrets — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
8 min readOver a few weeks in September, three security vendors launched “kill switches” for AI agents. California’s governor ordered state officials to study requiring one. And a bipartisan bill has been introduced in Congress called the AI Kill Switch Act. Everyone, it seem, is talking about kill switches. Far fewer agree on what one is, or […] The post What Is an AI Kill Switch? Where It Lives Decides Whether It Works appeared first on Aembit.
Defakto is helping set the standard for secure, interoperable non-human identity and access without long-lived credentials PALO ALTO, Calif. – October 20, 2026 – Defakto Security, the non-human identity and access management company for the enterprise, has joined the OpenID Foundation as a Sustaining Corporate Member alongside Cisco, Okta, and other technology leaders to shape …
Summary AI security discussions often focus on prompt injection, model vulnerabilities, and patching. But one of the most immediate risks is much more familiar: compromised credentials. AI agents require credentials to access enterprise systems and can also discover credentials exposed elsewhere. Because agents operate at machine speed and scale, even short-lived credentials can provide enough […] The post The Myth of the Solved Secret: Why Credentials Are AI’s Most Dangerous Vulnerability
Non-human identities now outnumber humans 45 to 1. Discover why AI-driven enterprises face escalating security risks from unmanaged machine credentials and how to secure them.
The cloud landscape is shifting beneath our feet. GPU-powered infrastructure is no longer a niche concern—it’s becoming the backbone of enterprise innovation. And with that shift comes an identity and governance crisis that most organizations are barely prepared to handle. The challenge? It’s no longer just about managing human access. It’s about managing both human […] The post Veza from ServiceNow: Comprehensive Identity Security for NeoClouds appeared first on Veza.
The credential-theft campaign known as GhostAction has ramped up, targeting more than 30,000 repositories across 3,000 users and organizations. The spike, according to GitGuardian, was observed on October 8 and 9, 2026. "This resulted from compromising the GitHub accounts of about 1,900 users. It attempted to extract 3,174 secrets from public repositories' CI," security researchers Gaetan
Threat actors are exploiting a critical security flaw in Langflow, according to an alert from Previdian. Langflow is an open-source platform that allows developers to build artificial intelligence (AI) applications and agentic workflows. In February 2025, DataStax, the parent company of Langflow, was acquired by IBM. The vulnerability in question is CVE-2026-105740 (CVSS score: 9.9), a case of
Summary: AI agent security requires controls that govern what agents actually do, even when they have legitimate access. A new Gartner report makes the case for independent runtime authorization that evaluates agent actions as they happen. Here’s why traditional identity and secrets management fall short, and how Akeyless Agentic Runtime Authority addresses the gaps. On […] The post Gartner on AI Agent Security: The Case for Runtime Authorization appeared first on Akeyless.
Every conversation I have about AI agents eventually lands on the same question. Not “which model?” Not “what’s the prompt?” What can it touch? If a prompt injection lands, the damage stops where the agent’s credentials stop. The blast radius of an AI agent is its keyring, and the access graph is how you see […] The post Follow the Key: What an AI Agent’s Access Graph Reveals appeared first on Hush Security.
Hush Entitlements adds access context to every NHI and AI agent Finding an AI agent is only the beginning. Agents don’t work alone. They reach your cloud services, data, and infrastructure through credentials and non-human identities (NHIs), and the access granted to those identities determines how far an agent can go. An agent with read […] The post You Found the Agent. Now Find Out What It Can Do. appeared first on Hush Security.
Hush Entitlements adds access context to every NHI and AI agent Finding an AI agent is only the beginning. Agents don’t work alone. They reach your cloud services, data, and infrastructure through credentials and non-human identities (NHIs), and the access granted to those identities determines how far an agent can go. An agent with read […] The post You Found the Agent. Now Find Out What It Can Do. appeared first on Hush Security.
8 min readAn agent that can read your inbox, use a browser, and work while you sleep changes the meaning of “signed in.” A session that once represented a person clicking through an application may now support software making decisions and taking actions for hours. Consider a simple request: prepare a customer briefing. The agent might read […] The post 10 Questions to Ask Before Deploying Personal or Desktop AI Agents appeared first on Aembit.
Speed, cost, and adaptability change—but not the underlying need to gain access.The post 5 cybersecurity assumptions AI attacks break appeared first on Silverfort.
The top PAM solutions in 2026 include Akeyless, CyberArk, BeyondTrust, Delinea, Keeper, and Teleport. Buyers should compare platforms based on deployment architecture, just-in-time (JIT) access and Zero Standing Privilege (ZSP), support for human and non-human identities, audit and compliance capabilities, and operational overhead. Modern PAM increasingly extends beyond password vaulting to identity-driven, temporary privileged access across hybrid, multi-cloud, DevOps, machine, and AI environme
Today, Silverfort announces an integration that brings its runtime Identity Security approach to Agent Gateway, part of Google Cloud Gemini Enterprise, giving teams real-time visibility into AI agent activity and enforcing access decisions as they happen. After Silverfort was named in Google Cloud’s Next ’26 announcement among the partner services bringing identity and governance administration […]The post Silverfort Secures AI Agents on Google Cloud in Runtime with Agent Gateway Integrati
As enterprises race to deploy autonomous AI agents to accelerate business, a new report reveals they are tethered to security architectures built for a different era. The "Horizons of Identity Security" report from SailPoint highlights a critical “velocity paradox,” in which organizations invest in AI-speed business operations while continuing to rely on human-speed security controls, creating a
14 min readToday we’ll explore how to use the identity service from Amazon Bedrock AgentCore to manage credentials that an AI agent running on EC2 can use to connect with an external service like GitHub. Amazon Bedrock is the AWS cloud computing suite of services for building and deploying AI applications and generative artificial intelligence agents. AgentCore […] The post Amazon Bedrock AgentCore Identity on EC2: A Step-by-Step GitHub OAuth Guide appeared first on Aembit.
Non-human identities (NHIs)—service accounts, application identities, API keys—have become the most prevalent identity types across corporate environments. They also tend to behave differently from the humans they serve. A person might log in from home, a coffee shop, an airport, and three different countries in a single month. A service principal that authenticates your third-party […]The post Making native geofencing work for cloud non-human identities appeared first on Silverfort.
Every modern enterprise depends on credentials. This is how humans, systems, and now AI, all connect to data, services, and each other securely. GitGuardian helps secure that credential layer through three connected capabilities: Detect, Remediate, and Prevent. The journey starts with detection, because organizations first need to understand what credentials exist, where they live, and what they
In early June 2026, an AI-driven operator tracked as JadePuffer (Microsoft: Storm-3168) used two compromised Azure service principals to map a tenant, then made 100+ storage account deletion attempts in about seven minutes. Most succeeded. There was no malware and no exploit inside Azure. Every action was a normal Azure Resource Manager call, allowed by roles the identities already held. We walk the full chain — the 16-hour recon window, the inherited RBAC that gave it the blast radius, and the
AI coding agents are changing how quickly developers can build and ship software as well as how quickly credentials can become exposed. According to GitGuardian’s 2026 State of Secrets Sprawl Report, commits identified as AI-assisted are leaking secrets at approximately twice the rate of human-written ones. Most of the fastest-growing categories of leaked credentials are now connected to AI
Cybersecurity researchers have disclosed Go-based malware distributed via two Go Modules and two Terraform providers, marking the first time threat actors are using the centralized repository hosted by HashiCorp as a distribution vector for malicious payloads. According to Aikido, the list of Terraform providers and Go modules is below - gocommunity-io/dockerd (222 downloads) kreuzwenker/
If you are researching Formal.ai alternatives, you have probably noticed the search results are unhelpful — most of them are about form builders and sales compensation software. This page is about the security company: Formal.ai, the protocol-aware proxy that sits inline between identities and data stores.Formal is a good product for a specific problem. It is not the right product for every problem that gets described as "securing AI agent access," and the alternatives differ from it more than t
Pomerium vs Formal.ai: Agentic Access Control ComparedYour AI agents are in production, and something has to decide what they are allowed to do. Two proxies come up in that evaluation, and teams comparing Pomerium vs Formal.ai usually discover partway through that they are not evaluating the same category of product.Formal.ai is a protocol-aware proxy that inspects and rewrites the contents of database queries and tool calls. Pomerium is an context-aware proxy that authenticates every actor and
An AI agent needs to read from your production database. Something has to stand between them. The market offers two architecturally distinct answers to that requirement, and the difference between a data-layer proxy and an context-aware proxy determines which failures you can actually prevent. Both deploy inline. Both enforce least privilege. Both are now marketed with the vocabulary of AI agent security. Underneath, one of them reads the contents of your queries and the other reads the identity
Vietjet and Thales strengthen partnership in MRO and kickstart digital aviation, AI & cybersecurity cooperation prezly Tue, 09/15/2026 - 09:07 Civil Aviation General aviation Asia-Pacific Share options Facebook X Whatsapp Linkedin Email URL copied to clipboard 15 Sept 2026 On September 10, Vietjet and Thales signed a “Repair-By-The-Hour” contract covering Thales products for A320 and A330 fleets, demonstrating trust in Thales as a premium provider of repair and maintenance solutions.Further
