News for today:
- [Omada] Acquired EmpowerID. Omada announced the acquisition of EmpowerID, for its runtime AI agent governance capabilities; will be folded into / incorporated into Omada’s Agent Governance solution. AI agents have become the fastest-growing identity population inside the enterprise, but they’re also the least governed. The access controls built for human employees simply weren’t designed for something that moves, and can go wrong, at machine speed. Together, Omada and EmpowerID change that. Their combined platform lets organizations decide in real time what each agent is permitted to do and lets them stop it the instant it steps outside those boundaries, instead of finding out what happened at the next audit. Omada
- [BeyondTrust] Falcon integration. BeyondTrust announced new integrations between its Pathfinder platform and CrowdStrike’s Falcon Next-Gen SIEM, with identity signals (relationships, exposure insights) from Pathfinder now flowing into Falcon. e.g., (one of the integrations) BeyondTrust Endpoint Privilege Management (EPM), which surfaces policy changes, privilege elevation requests, and blocked execution events within Falcon alongside other threat indicators. BeyondTrust
- [Semperis] v2 of Migrator for Active Directory. Semperis updated its AD migration solution with a significant architectural overhaul – for better observability, control, and security. This new version of Semperis Migrator for AD is built on Kubernetes and is designed around a central premise: that every object you migrate is a trust boundary crossed. The release introduces: [1] Directory Synchronization Sets (DSS) for project-scoped, wave-based execution; [2] Staging reports that preview every change before it commits; [3] A Secure Access and Control Agent for in-place endpoint cutover without reimaging; [4] A unified searchable log surface across all components; and [5] Deployment validation that surfaces infrastructure blockers during setup instead of mid-migration. Semperis
- [Keeper Security] Let’s chat about it. Keeper Security integrated its identity workflows with Google Chat, so request and approval tasks can be orchestrated entirely in Google Chat. Keeper’s Google Chat App integration addresses a critical gap for organizations that use Google Workspace as their primary collaboration platform, enabling administrators to manage privileged access without switching to separate tools. Teams can now submit vault access requests with justification and custom permission levels, retrieve secrets and approve just-in-time elevation requests with full audit trails and reporting. Administrators enforce time-limited access windows and policy-driven approval routing through Keeper without requiring users to navigate multiple systems. Keeper Security
- [KnowBe4] Real-time control over shadow AI. KnowBe4 expanded its Agent Risk Manager offering with real-time control over shadow AI within Chrome and Edge via a browser extension. Where many shadow AI and browser-security offerings operate as standalone extensions or network layer add-ons, Agent Risk Manager sits inside the broader KnowBe4 Platform, which draws on 16 years of behavioral risk data across more than 70,000 customers. That means shadow AI activity captured at the browser does not sit in an isolated console, it feeds the same risk profile as an organization’s phishing simulations, security awareness training, and real-time coaching, and lays the groundwork for a unified Risk Score. KnowBe4
- [CloudEagle] Secure Browser – an extension. CloudEagle announced a new browser extension that enforces policy-based access controls for AI tools and LLMs. The CloudEagle.ai browser extension detects the moment a user logs into a non-corporate AI tenant and acts on it while the session is live, so that activity is governed the same way a sanctioned application would be …. Through the browser extension, IT and Security teams can now: (e.g.,) Redirect employees who open an unapproved AI tool to the company’s sanctioned alternative through a flash page, before any prompt is entered. CloudEagle
- [Optery] Carahsoft partnership for the public sector. Optery’s personal data removal services for businesses will now be available to public sector organizations via Carahsoft. The partnership makes it easier for Public Sector organizations to procure and deploy Optery’s personal data removal platform to protect elected officials, judges, prosecutors, law enforcement personnel, agency leaders, security teams and other high-risk personnel from threats stemming from data broker exposure. Optery
- [VerifyLabs] Side effects of being deepfaked. VerifyLabs offers a comprehensive list of consequences due to deepfake activity – covering financial; professional and occupational; and reputational and social consequences; among others. VerifyLabs