Identity governance stories
Large organisations face growing exposure as AI agents are increasingly granted privileged access without the oversight applied to human staff.
Machines now account for most cloud identities, leaving firms exposed to faster attacks, over-privileged access and AI-driven risks.
Organisations face a growing gap in controls as AI agents and machine identities outpace perimeter defences and widen credential-based attack risk.
AI agents and service accounts are exposing Australian and New Zealand firms to regulatory, financial and reputational risk as controls lag.
Weak identity controls are now driving most attacks on Australian organisations, with breaches hitting revenue, customers and supply chains.
Breaches in large cloud environments are increasingly tied to weak identity controls, misconfigurations and poor data sovereignty governance.
Rising automation and data growth are exposing cloud users to identity drift, hidden telemetry gaps and fragmented defences.
Identity teams could face slower patching and costlier upgrades when “SaaS” turns out to be hosted software, experts warn.
Rising cloud adoption is leaving Australian and New Zealand firms exposed to credential abuse, misconfigurations and costly automated attacks.
Rising deepfake and synthetic-identity attacks are prompting banks and regulators to back new guidance on hardening fraud defences.
Independent checks on digital identity products will now be carried out by Kantara as the OpenID Foundation expands its conformance programme.
Enterprises with fragmented identity systems can now avoid forest trusts as the integrated product covers humans and AI agents across domains.
Without proper oversight, rapidly growing AI agent workforces could leave firms blind to who can access systems, data and privileges.
Most firms cannot tell AI agent activity from human use, leaving access controls strained as autonomous software spreads across production systems.
BeyondTrust warns a surge of unsupervised AI agents is creating a hidden “shadow workforce” with admin-level access inside enterprises.
Saviynt unveils an AI identity security platform to govern autonomous agents across major enterprise AI stacks and close emerging access gaps.
Ping unveils Identity for AI, a runtime identity framework to govern autonomous software agents' access, actions and accountability.
Rubrik links Microsoft Defender with new AI governance engine SAGE to speed identity attack recovery and tighten control of autonomous agents.
Yubico and Delinea unite hardware keys with identity checks to ensure each high‑risk AI agent action is explicitly approved by a human.
Netwrix enhances its 1Secure platform to map AI access, tightening data governance and Copilot monitoring across hybrid environments.
