News for today:
- [Material Security] From email to OAuth. Material Security explores the evolving attack chain centered around OAuth compromise instead of credential compromise for email first, and where the rapid of adoption of AI agents within organizations outside of security’s purview sits. Your employees are connecting AI agents to Google Workspace right now. Those connections are legitimate. The OAuth grants are authorized. The agents are reading email, searching Drive, and taking actions on behalf of real users. In most organizations, this is happening faster than security teams can discover it. When an AI agent behaves unexpectedly due to ambiguous instructions, unanticipated reasoning chains, or prompts encountered in the environment itself, it can traverse the same path as an attacker. Material Security
- [Integrity360] Acquired CyberIAM. Integrity360, a specialist cybersecurity firm in EMEA, acquired CyberIAM, a specialist identity security services company. CyberIAM’s services capabilities will be offered to clients via Integrity360. CyberIAM has deep expertise and a long track record in the world of Identity including design and architecture, assessment, remediation, integration, deployment, strategy development, and training in addition to a wide range of support and managed services. It also has in-depth expertise, experience and accreditations in all of the world’s major Identity platforms including CyberArk (now Idira from Palo Alto Networks), SailPoint, BeyondTrust and Saviynt having advised, designed and deployed, and supported and managed such solutions for multiple global enterprise organisations. Integrity360’s existing Identity services and resources will be integrated with the CyberIAM team and Identity managed services will operate from the group’s one global SOC operation. Integrity360
- [Nasuni] Acquired DryvIQ. Nasuni acquired DryvIQ for its content intelligence smarts so organizations can better understand what data they have and how that data can be leveraged for making smarter decisions. DryvIQ’s classification models open files, read what’s inside, and detect sensitive information across more than 1,000 document types and 175 languages. File infrastructure knows about files. Content intelligence knows what files mean. DryvIQ extends that intelligence across the entire enterprise file environment, giving Nasuni customers visibility not just into the data they manage today, but everywhere files live. Together, these two forms of intelligence — operational state and content understanding — create the continuously current, governed context that enterprise AI needs. Nasuni (and read the press release)