Identity Infrastructure Becomes a Critical Attack Surface
Key Questions
What recent funding supports AI agent identity security?
Oak raised $60M seed for AI agent access mapping and SoD automation, while Empirical Security raised $25M Series A for AI-powered exposure management.
Which companies launched new identity tools for AI agents?
Keeper Security launched JIT privileged access with zero-knowledge architecture, and 1Password released a zero-exposure architecture for Claude.
What acquisition strengthens exposure management capabilities?
CrowdStrike acquired XM Cyber IP to strengthen exposure management, while Cisco is in talks to acquire Zafran at $150-200M.
Why is identity compromise now the top ransomware vector?
Identity compromise has become the leading ransomware entry point, with MFA failing in 97% of breaches due to coverage gaps rather than technology issues.
What ratio of machine to human credentials was reported at Gartner Tokyo?
The Gartner Tokyo summit confirmed a 45:1 machine-to-human credentials ratio, highlighting the scale of non-human identity risks.
How are vendors addressing AI agent behavior controls?
Teleport launched AI agent behavior controls including session summaries, classifiers, and risk scoring to operationalize 'assume misalignment'.
What partnership focuses on zero trust for AI agents and SaaS?
Zscaler and Reco partnered on zero trust for AI agents and SaaS apps to operationalize identity-as-perimeter for non-human identities.
What visibility gap exists for non-human identities?
C1 CISO data shows 87% rate non-human identity risk as urgent, yet only 22% have full visibility into these identities.
The report of a compromised ConnectWise credential accessing 173 Microsoft 365 tenants and escalating to Global Admin rights remains an unverified, undated lead. An undated identity and Zero Trust webinar reiterates least privilege and agent governance but adds no verified incident or market catalyst.