Identity Security & IAM Misconfigurations

98% of large enterprises have IAM misconfigurations across AWS/Azure/GCP; midmarket remediation lag 35 days. Cyera acquires Oasis Security for $1B to address NHI and AI agent control gap (agents use 100% of permissions vs humans' 4%). Identity reaffirmed as foundation of Zero Trust. Critical distinction — Zero Trust controls connectivity but not privilege persistence; 97% of NHIs overprivileged, requiring mapping of standing privilege across all identity types. CSA 2026 top cloud threats list identity and AI attacks as top concerns, reinforcing this focus. Identity hygiene remains a persistent issue: orphan accounts are a classic risk, and a new Forrester TEI study (Okta-commissioned) quantifies identity security ROI at 216% ($15.5M benefits), useful for justifying consolidation investments.