Identity & access
-
NHS trust investigates patient-record access
East Suffolk and North Essex NHS Foundation Trust has opened an urgent investigation after concerns that a child patient’s medical records may have been viewed without a legitimate clinical reason.
-
SAP links AI agents to runtime controls
SAP is integrating NVIDIA OpenShell with its Business AI platform, combining runtime isolation with enterprise authorisation, identity, and audit controls for autonomous agents.
-
Omada buys EmpowerID for agent identity controls
Danish identity-governance vendor Omada has acquired EmpowerID, adding runtime controls for AI agents to a platform traditionally focused on human and non-human identities.
-
Device-code phishing targets European Microsoft 365 users
A phishing operation targeting organisations in Europe and the US is abusing Microsoft 365 device-code authentication before deploying legitimate remote-management software on compromised endpoints.
-
SurePay reshapes leadership around fraud intelligence
Dutch payments security company SurePay has appointed Robert Soetens as chief product officer as it expands from account verification towards shared fraud-risk intelligence.
-
Cyera adds $400m for AI security
Goldman Sachs Alternatives has invested another $400 million in Cyera as the data-security company expands into AI-agent oversight and non-human identity.
-
Vendors agree blueprint for AI agents
AWS, Okta, CrowdStrike, Google Cloud, Salesforce, ServiceNow, Wiz, Zscaler, and other vendors have formed an alliance around a shared architecture for governing AI agents.
-
Outerlimit raises $16m for agent controls
UK-founded Outerlimit has emerged from stealth with $16 million to build a security layer that attempts to enforce authorisation when AI agents invoke tools and take actions.
-
Integrity360 expands identity practice after CyberIAM
Integrity360 has combined more than 90 specialists into an expanded identity practice following its CyberIAM acquisition, covering human, machine, privileged, customer, and AI identities.
-
Gartner survey finds deepfakes in enterprise calls
A Gartner survey of 297 senior cybersecurity leaders found 41% had encountered at least one deepfake-related social-engineering incident involving an employee audio call during the previous year.