AI is learning to control machines…but can it trust them?
The post AI is learning to control machines…but can it trust them? appeared first on Device Authority.
Vendor news
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
371 matching stories — announcement, in Non-Human Identity & Secrets — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Thales Alenia Space wins NIGCOMSAT contract to build NigComSat-2A geostationary telecommunications satellite
Thales Alenia Space wins NIGCOMSAT contract to build NigComSat-2A geostationary telecommunications satellite tas Mon, 09/14/2026 - 08:16 Space Share options Facebook X Whatsapp Linkedin Email URL copied to clipboard 14 Sept 2026 Cannes, September 14th, 2026 – Thales Alenia Space, a joint venture between Thales (67%) and Leonardo (33%), has signed a contract with Nigeria’s government-owned NIGCOMSAT Ltd to develop a new telecommunications satellite operating from geostationary orbit. The communic
Thales Builds Cryptographic Security for the Age of AI and Post-Quantum Computing
Thales Builds Cryptographic Security for the Age of AI and Post-Quantum Computing prezly Mon, 09/14/2026 - 08:00 Cybersecurity Application security Data security Share options Facebook X Whatsapp Linkedin Email URL copied to clipboard 14 Sept 2026 Thales launches Luna 8, a new hardware security module (HSM) to provide future-ready, quantum resistant security to protect critical data and applications. Powered by a Thales designed cryptographic processor, it delivers unparalleled performance, enha
Unmasking the Gaps: Why Akeyless Outperforms Traditional PAM
See how modern privileged access management addresses traditional PAM gaps with zero standing privileges, JIT access, DevOps integrations, and simpler deployment. The post Unmasking the Gaps: Why Akeyless Outperforms Traditional PAM appeared first on Akeyless.
PaperCut breach: What AI agent attacks teach us about Identity Security resilience
A technical breakdown of the attack where hundreds of AI agents exploited two NG/MF flaws, reinforcing an AI attacker’s appetite for identity and credential abuse.The post PaperCut breach: What AI agent attacks teach us about Identity Security resilience appeared first on Silverfort.
AI Agent Identity Security: Why IdP-Centric IAM Falls Short
Learn why IdP-centric IAM falls short for ephemeral AI agents and how workload identity, gateway enforcement, and runtime authorization provide stronger control. The post AI Agent Identity Security: Why IdP-Centric IAM Falls Short appeared first on Akeyless.
Breaking the Chain: Secrets Management in the MITRE ATT&CK Framework
Most organizations unknowingly leave gaps in their defenses, making them vulnerable to credential theft, privilege escalation, and lateral movement. The post Breaking the Chain: Secrets Management in the MITRE ATT&CK Framework appeared first on Akeyless.
HashiCorp security advisory (AV26-910)
What is OIDC and How Does It Work?
6 min readOpenID Connect (OIDC) is a protocol built on top of OAuth 2.0 to delegate authentication in a REST-like manner. If OAuth is about authorization (what an entity can access), OIDC is about who they are. In practice, OIDC provides a standardized way to implement single sign-on (SSO), which allows users to verify their identity across […] The post What is OIDC and How Does It Work? appeared first on Aembit.
AI agent intent, explained: What Silverfort actually means when we say it
Learn how an AI agent's declared intent connects visibility, access, and control.The post AI agent intent, explained: What Silverfort actually means when we say it appeared first on Silverfort.
MCP’s Second Act: The Web-Native Protocol
4 min readWhat’s Changing With MCP 2026-07-28? If you’ve worked in distributed systems, cloud infrastructure, or API design over the past two decades, the MCP 2026-07-28 changes probably look familiar. Stateless requests, metadata headers for routing, cacheability baked into responses, load-balancer friendliness, HTTP as a first-class substrate and deprecation windows aren’t new ideas. They’re the hard-won lessons […] The post MCP’s Second Act: The Web-Native Protoc
MCP Governance: What the OWASP Framework Requires, and Where Enforcement Has to Live
Most enterprises did not decide to adopt the Model Context Protocol. Engineers did, one mcp.json file at a time. The result is a class of asset that reads internal wikis, opens pull requests, queries production databases, and posts to Slack — at machine speed, often without a human seeing the intermediate steps. MCP governance is the discipline of answering one question before that happens: should this MCP server be allowed in our environment, and under what controls? In 2026, that question fina
What Are the Main Types of AI Gateways? LLM, MCP, and Agent Gateways Explained
8 min readGateways have long marked important boundaries in computing. Network gateways connected systems that used different protocols. Secure web gateways inspected traffic moving between employees and the internet. And API gateways gave organizations a central point for routing service requests, authenticating clients, applying policy, and recording activity. They continue to serve those functions in agentic systems, […] The post What Are the Main Types of AI Gateways? LLM, MCP, and Age
It’s the swan song of traditional PAM, and that’s good news for security
Protecting privileged identities remains one of the biggest security challenges organizations face today. Yet, it’s time we admit it: the approach taken to solve this problem for nearly three decades has utterly failed. IAM teams were driven to buy tools that were supposed to protect them. In practice, they only gained a false sense of security.   Customers we speak with tell us the same story: millions spent on PAM solutions, only to protect a few hundred accounts, at m
Thales and Kalyani Strategic Systems Limited sign Strategic Alliance Agreement for 70-mm Rocket Systems
Thales and Kalyani Strategic Systems Limited sign Strategic Alliance Agreement for 70-mm Rocket Systems prezly Thu, 09/03/2026 - 12:15 Defence Asia-Pacific India Share options Facebook X Whatsapp Linkedin Email URL copied to clipboard 03 Sept 2026 Building on a decade-long relationship and aligned with India's Make in India vision, Thales and Kalyani Strategic Systems Limited (KSSL) have signed a Strategic Alliance Agreement to establish an advanced industrial capability for 70-mm rocket systems
Your AI agent traces are probably leaking secrets
Redaction catches only what you know to look for. Here's how to stop credentials from reaching your traces at all.
Building the foundation for the Smart, Green Port
The post Building the foundation for the Smart, Green Port appeared first on Device Authority.
Run It Yourself: The Riptides Core Capability Demo
IBM’s Breach Report Makes the Case for Object-Level Data Security
IBM’s latest Cost of a Data Breach report puts the average breach cost at a record $4.99 million. According to the report, AI-driven attacks increased 56% year over year, while breaches involving AI systems and models rose 61%.
How to Audit Excessive Permissions Across Cloud and SaaS | Token Security
Learn how to audit excessive permissions with cloud permission audit data, entitlement mapping and unused permission analysis.
What are best practices for non-human identity management? | Token Security
Learn non-human identity management best practices to discover, govern, and secure service accounts, secrets, AI agents, and machine identities.
Unsecured API Keys in AI-Driven Applications and Agentic Systems | Token Security
Unsecured API keys are a growing risk in AI-driven and agentic systems. Learn how exposure happens, why it matters, and how to secure your applications.
Password Fatigue: Risks After Vacation
Few things feel better than logging off, leaving the office behind, and taking a well-deserved... La entrada Password Fatigue: Risks After Vacation se publicó primero en Secrets Vault.
The rise of Non-Human Identities (NHIs)
Machine identities outnumber people 144 to 1. Why an inventory cannot govern them, and what can.
You Shouldn’t Have to Predict the Future to Secure Your Devices
The post You Shouldn’t Have to Predict the Future to Secure Your Devices appeared first on Device Authority.
How MCP servers handle data privacy and security
How to govern the credentials your MCP deployments are already using
The Identity Security Maturity Model: A Roadmap to Least Privilege
Why we built this framework Ask ten CISOs where their identity program stands today, and the answers will differ wildly: different vocabularies, different priorities, different definitions of “done.” There’s no shared standard for how to plan and implement an identity program, and that’s the gap Veza teams have spent years helping organizations close. Identity has […] The post The Identity Security Maturity Model: A Roadmap to Least Privilege appeared first on Veza.
Every Agent Is a Paperclip Maximizer
You know the thought experiment. Build a superintelligent AI. Give it one goal: make paperclips. It converts the factory into paperclips. Then the town. Then the planet. Not out of malice. Out of relentlessness. Nick Bostrom used it to make a point about alignment. Most people file it under science fiction and move on. They […] The post Every Agent Is a Paperclip Maximizer appeared first on Hush Security.
Your Coding Agent Should Never Hold a Token: Riptides Approach to Credential Brokering
Breaking MCP at the Identity Layer
Part 1 attacked the MCP server itself. This part assumes all of that is patched and breaks in through the identity layer instead — where nothing is a bug you can close, and the server does exactly what it was told by the wrong person. We walk the 2026-07-28 authorization spec and the RFCs behind it, the confused-deputy attack that comes from getting consent wrong, how EMA and ID-JAG move consent to the IdP — and the four gaps that remain open afterwards, where every token is valid and nothing in
Breaking MCP at the Identity Layer
Part 1 attacked the MCP server itself. This part assumes all of that is patched and breaks in through the identity layer instead — where nothing is a bug you can close, and the server does exactly what it was told by the wrong person. We walk the 2026-07-28 authorization spec and the RFCs behind it, the confused-deputy attack that comes from getting consent wrong, how EMA and ID-JAG move consent to the IdP — and the four gaps that remain open afterwards, where every token is valid and nothing in
Corsha Wins Silver Globee® Award for Best Critical Infrastructure & OT Security Solution in the 21st Annual 2026 Globee® Awards for Technology
Recognized for Technology Innovation, Digital Transformation, and Measurable Business Impact
Delinea Delivers Runtime Authorization for AI Agents
Closing the gap between secrets management and access control, across protocols agents use
When the MCP Server Is the Payload: Attacking MCP at the Implementation Layer
MCP replaced manual API wiring with one open protocol — and in doing so created a new attack surface where the server itself is the payload. Nothing in the protocol separates a description that documents a tool from one that commands the model. Part 1 of a two-part series. We walk the four adversary classes against MCP — tool poisoning, typosquatting, rug pulls, command injection, API key exfiltration, and sandbox escapes — reconstructing known CVEs against their pre-patch versions to show the m
Adopting SPIFFE Should Not Require an Engineering Team
Identity Was Built for Humans Logging In. Agentic AI Ripped Up That Assumption.
Every identity system in your enterprise carries a hidden design assumption: that a person is on the other end of the request. A person who authenticates in the morning, holds a session, clicks through a consent screen, and can be reached on Slack when something looks wrong. Agentic AI removes the person. What's left is a credential holder that acts continuously, at machine speed, on inferred intent — and there are now vastly more of them than there are of you. Non-human identities outnumber hum
Your IAM Was Built for People. Your Biggest Identity Problem Isn't People Anymore.
Every enterprise identity program was designed around a simple assumption: the thing logging in is a person. A person with a password, an MFA device, a predictable workday, and a manager who approves their access. That assumption is now wrong most of the time. Machine identities outnumber human ones by anywhere from 80 to 1 to more than 100 to 1 in the modern enterprise, and AI agents are the fastest-growing slice of that population. The identity systems most organizations run today weren't just
Inside Veza’s AI Agent Security for Microsoft Copilot Studio: A Technical Deep Dive
How Veza Models Every Bot, Topic, Action, Flow, MCP Server, and Dataverse Role in a Single Access Graph When we launched AI Agent Security for Microsoft Copilot Studio in December, we promised customers one thing: that every bot in their environment would show up in the Access Graph as a first-class identity — with every […] The post Inside Veza’s AI Agent Security for Microsoft Copilot Studio: A Technical Deep Dive appeared first on Veza.
Why Cross-Cloud Federation for Workload Access Is So Hard
Most workloads no longer live in one cloud. A service runs in AWS, calls a database in GCP, and pulls a secret from an Azure vault. Each of those hops needs access. And access means identity. For humans, we solved this. Single sign-on, one IdP, federated trust. For workloads and AI agents, the tools now […] The post Why Cross-Cloud Federation for Workload Access Is So Hard appeared first on Hush Security.
Corsha Builds Out Leadership Team to Secure the Industrial AI and Data Revolution
Welcomes Melissa Keohane as COO and Kevin Bocek as CPO, Eric Kumar takes on expanded role as CCO