New
Which security investments are you prioritising for FY27?
Identity, cloud security posture, AI security, SOC automation, resilience? Share your top two and why.
Topic
Identity and access
67 stories in the last 90 days · 2 community threads
In short
Identity covers how people, services and devices prove who they are and what they may access: single sign-on, multi-factor authentication, privileged access and managing accounts from joining to leaving. Buyers care because stolen credentials and over-broad permissions sit behind many breaches, and identity now spans staff, cloud workloads and AI agents.
Written by Techarda editors · Updated · How we work
Latest stories
The newest Identity and access stories from the last 90 days. Each one opens with our summary and a link to the original source.
Security
Your Next Insider Threat Won’t be Human: Securing AI Agents From the Outside in
Why the controls on an AI agent have to live outside of it, and what a security operations team can implement and maintain those controls. The new privileged user in your environment Security teams spent two decades learning how to work with the people they trust most. Domain admins, DBAs, finance approvers and contractors with VPN access all get a mature playbook: verified identity, scoped…
Security
Unmasking the robots: Why it’s critical to discover AI agent identities and how Tenable helps you secure them
Discover how to secure AI agents in your cloud environment with Tenable One Cloud Exposure. We explore Microsoft Entra Agent ID and provide essential best practices for robust agentic AI identity security. Key takeaways Understand your current maturity level and then build an appropriate action plan to secure your agent identities. Use your cloud providers’ native tools or Tenable One Cloud…
Security
Loud, Fast, and Everywhere: Anatomy of a Real AI-Driven Cloud Attack
Wiz CIRT responded to AI-driven attacks spanning cloud, Kubernetes, CI/CD, and identity. Learn how these attacks behave and how to detect them.
Edge & IoT
Scooping OCI-Artifacts: Understanding OCI Specifications Through an Ice-Cream Stand (Part 1)
TL;DR: OCI specification fundamentally separates the “WHERE” (addressing, routing, registry URLs, and transports) from the “WHAT” (the immutable artifact, its layers, and its execution contract). The key realization of this post is that OCI focuses almost exclusively on the “WHAT.” By standardizing the content, its cryptographic identity, and how it unpacks, OCI leaves addressing and routing…
Security
Continuous accountability for Verified bots
Identity alone doesn't guarantee a bot will behave responsibly. We are introducing a system to continuously evaluate whether Verified bots honor site preferences, like robots.txt and HTTP 429s, ensuring they remain accountable over time.
Cloud Infrastructure
Why the AI Loop Will Test Every Security Assumption
Every turn of the AI loop adds new weights, traces, and access paths. CoreWeave CISO Jim Higgins discusses keeping identity, keys, and telemetry attached to the work as it moves.
DevOps & Platform Engineering
Build at AI Speed on CloudBees CI: MCP Router OAuth and Secrets Masking | CloudBees
Connect AI agents to CloudBees CI with single sign-on instead of API tokens, and keep runtime credentials out of build logs. Now generally available.
Containers & Kubernetes
Modernizing perimeter security: Scalable perimeters with VPC Service Controls
Agents represent a fundamental shift in cloud operations. They can act on behalf of users or autonomously, make non-deterministic decisions, and request data across projects at unprecedented speed and scale. Because agents are a distinct category of non-human identity (NHI), they require unique secure-by-default guardrails. Traditional, manually-operated network perimeters are vulnerable to…
Earlier in the last 90 days
- AI in Platform Engineering: When Agents Join Your PlatformSpacelift · 16 Oct 2026
- What is agentic identity? Securing AI agents in 2026Twilio · 15 Oct 2026
- Sophos ITDR expands identity protection for the AI eraSophos · 15 Oct 2026
- From One Account to Every Mailbox: Breaking Zimbra's Identity Boundaries (Part 1)Rapid7 · 15 Oct 2026
- AWS Transfer Family now supports AWS Secrets Manager storage for SFTP server host keysAmazon Web Services · 14 Oct 2026
- Scale your team's use of AWS IAM account access manager with PulumiPulumi · 14 Oct 2026
- Enterprise SSO and SaaS MCP Servers - How to Authorize with Agent Gateway Enterprise? | Solo.ioSolo.io · 14 Oct 2026
- Solo Enterprise for Istio 1.30: Agentic Mesh, ztunnel-Native Egress, New UI, and Fine-Grained Workload Identity | Solo.ioSolo.io · 13 Oct 2026
- AI Usage Control: Why Employee AI Use Needs Its Own CategoryAkamai · 12 Oct 2026
- AWS Lambda supports OAuth authentication for self-managed Apache Kafka event sourcesAmazon Web Services · 10 Oct 2026
- Amazon Quick now supports brand templates for on-brand presentations and documentsAmazon Web Services · 10 Oct 2026
- Amazon SageMaker Unified Studio now supports custom Tooling blueprintsAmazon Web Services · 9 Oct 2026
- Introducing JWT authentication in ClickHouse CloudClickHouse · 9 Oct 2026
- CISA’s 17 Common Active Directory Compromise Techniques: A Sophos MDR PerspectiveSophos · 7 Oct 2026
- Securing Agent-to-Agent Communication: The Next Identity FrontierRapid7 · 7 Oct 2026
- AWS IAM Identity Center now supports network access controls for Identity StoreAmazon Web Services · 6 Oct 2026
- AWS Batch now supports Amazon EKS access entry authenticationAmazon Web Services · 6 Oct 2026
- AWS Private CA now provides detailed certificate issuance logsAmazon Web Services · 5 Oct 2026
- Your first 10 minutes on SUSE Rancher for AWSSUSE · 5 Oct 2026
- Building zero trust networks with Red Hat AnsibleRed Hat · 5 Oct 2026
- Friday Five: October 2, 2026 | Red HatRed Hat · 2 Oct 2026
- Dr. Cat Hicks on the Psychology of Software TeamsHoneycomb · 1 Oct 2026
- AWS IAM Identity Center extends multi-Region support to more AWS RegionsAmazon Web Services · 1 Oct 2026
- Introducing SCIM Provisioning in ClickHouse CloudClickHouse · 1 Oct 2026
- Managing Claude Code Sessions Through LynxTigera · 1 Oct 2026
- Cohesity Identity Resilience automates the last mile of AD recoveryCohesity · 1 Oct 2026
- Google Cloud partners deliver new security agents and AI defenses with Gemini EnterpriseGoogle Cloud · 30 Sept 2026
- Zoho Mail Admin Console: Domain setup and managementZoho · 29 Sept 2026
- Amazon SageMaker Unified Studio now supports two new connection capabilities: Iceberg REST Catalog connections and IAM authentication for Amazon DocumentDBAmazon Web Services · 28 Sept 2026
- Secure AI agents with HashiCorp BoundaryHashiCorp · 27 Sept 2026
- AWS IAM outbound identity federation now supports interface VPC endpoints for OIDC discoveryAmazon Web Services · 26 Sept 2026
- New webinar series now on demand: Secure Networking Ecosystem InsightsCisco · 26 Sept 2026
- AWS End User Messaging now supports voice calling on WhatsAppAmazon Web Services · 25 Sept 2026
- The Ladders Just Got TallerHarness · 23 Sept 2026
- Bringing Enterprise Identity and Key Control to AI on CoreWeaveCoreWeave · 23 Sept 2026
- Beyond Identity: Governing the Agentic EnterpriseAkamai · 22 Sept 2026
- Risky identities continue to plague cloud infrastructuresSysdig · 22 Sept 2026
- Agent Identity and Access Management - Can SPIFFE Work? | Solo.ioSolo.io · 22 Sept 2026
- OpenRouter Is a Success. But It Is Not an Enterprise AI Gateway | Solo.ioSolo.io · 22 Sept 2026
- What is CIAM in 2026 and why does it matter?Twilio · 15 Sept 2026
- Connections: managed credentials and per-caller identity for Managed Deep AgentsLangChain · 14 Sept 2026
- Agent Gateway: The Next Evolution of the API GatewayPostman · 11 Sept 2026
- Secure AI Coding: Governing every agent, artifact, and identityPalo Alto Networks · 11 Sept 2026
- What Is ISPM? How It Differs from IAM, PAM, IGA, and IDaaSQualys · 10 Sept 2026
- Off Guard: Breaking LiteLLM from authentication bypass to cloud compromiseWiz · 10 Sept 2026
- CrowdStrike Announces Agentic Identity ProviderCrowdStrike · 2 Sept 2026
- HashiCorp Vault agentic IAM is now generally availableHashiCorp · 2 Sept 2026
- Secure mainframe access with HashiCorp BoundaryHashiCorp · 2 Sept 2026
- Broadcom Delivers End-to-End Security, Identity, and Observability for Agentic AIBroadcom · 31 Aug 2026
- Identity-as-a-Service: Uncovering Dark Web Marketplaces Trading Executive SSNsRapid7 · 27 Aug 2026
- Streamline identity lifecycle management on HCP with SCIM provisioningHashiCorp · 27 Aug 2026
- Cohesity Identity Resilience: Purpose-built for Active Directory challengesCohesity · 25 Aug 2026
Showing the newest 60 of 67. The feed archive lists every story by month.
What practitioners are discussing
Stories say what companies announced. These threads are where people who work with Identity and access compare notes.
New
How far along is your zero-trust journey, honestly?
Identity-first access, device posture, microsegmentation: which parts are done and which keep slipping?
Companies in these stories
The active companies with the most Identity and access stories in the last 90 days. It counts news coverage, not quality, market share or fit for your needs.
Related categories
Where Identity and access sits among the categories Techarda covers. Each hub shows who is active, and each guide sets out how to evaluate vendors.
Terms to know
Plain definitions of terms that come up in Identity and access stories, from the Techarda glossary.
Frequently asked questions
What is phishing-resistant MFA?
Multi-factor authentication that can’t be tricked into working on a fake site, such as passkeys or hardware security keys. Codes sent by text message and one-tap approvals can be phished or worn down by repeated prompts.
What is privileged access management?
Controls for accounts with powerful rights, such as administrators and service accounts: vaulting credentials, granting access only when needed, recording sessions and removing standing privilege where possible.
How should we handle identities for machines and AI agents?
Give every workload and agent its own identity with the least access it needs, prefer short-lived credentials to long-lived keys, and review them as you would human accounts. Machine identities are easy to forget.
Stories are filed under topics automatically from their headline and summary, so the odd one may sit in the wrong place. Spotted one, or a topic we should add? Email engage@techarda.com. All topics.