Resource Hub
Notes on Access Management from the team building Cakewalk.
Announcements2 entries
Talk The Walk5 entries
Opinion1 entry
Knowledge7 entries
Field Guides8 entries
News33 entries
Latest
IBM Fixes 22 Flaws in Verify Identity Access, Including Code Execution Without a Login
GitLab Users With Agent Platform Access Could Run Commands on Its Self-Hosted AI Gateway
Misused Company Access Exposed CPR Data on About 8.8 Million People in Denmark
Researchers Got Six Agent Frameworks to Run an Attacker's Tool Call
Announcements
Talk The Walk
It Doesn't Take a Hacker to Leak Your Data: How to Secure AI Agent Access in the Enterprise [Webinar Recap]
How to Adopt AI Agents Securely at Scale: The 4 Zones of Automation [Webinar Summary]
AI Agent Access Control for Regulated Industries: What EU Auditors Are Already Asking [Webinar Recap]
OpenClaw & Moltbook: Why AI Agent Access Is The Next Identity Crisis [Webinar Summary]
How To Scale Securely In 2026 Without Growing Your IT Team with Peter Kovacs [Webinar Summary]
Opinion
Knowledge
A Summary of the CISO Guide to AI Agent Security
MCP v2 Improves Agent Access Control and Still Cannot Say Who Decided
AI Gateway Security: The New Attack Surface and the New Control Point
Runtime Governance: The Missing Layer for Agent Access
The New Frontier in Identity Security: AI Agent Access
AI in Cybersecurity, Identity Governance & Access Management in 2026
The Future of Identity Governance is Employee-Centric. Here's Why.
Field Guides
This Will Be Your Team's Best Hire: Agent Cake
Top 5 User Access Review Tools in 2026
Okta Alternatives: 10 Identity and Access Management Platforms Compared
Top 5 AI Agent Access Control Platforms in 2026
Top 8 Identity and Access Management Tools for AI Agents in 2026
Top 10 AI Agent Security Tools for Access Management in 2026
Top 8 SOC 2 Compliance Tools for Access Management in 2026
Uncovering and Fixing Shadow IT
News
IBM Fixes 22 Flaws in Verify Identity Access, Including Code Execution Without a Login
GitLab Users With Agent Platform Access Could Run Commands on Its Self-Hosted AI Gateway
Misused Company Access Exposed CPR Data on About 8.8 Million People in Denmark
Researchers Got Six Agent Frameworks to Run an Attacker's Tool Call
Swiss Study Links Shadow IT Accounts to Ransomware Victims
One Prompt Exposed Every Agent in Its Region Under AWS's Old AgentCore Default
Shared Agent Memory Can Hand One Team's Restricted Data to Another
Apple Plans Stricter macOS Full Disk Access, Citing AI Agents
In a German Survey, 64% of AI-Using Firms Limit Access Rights and 40% Log Use
U.S. Health Department Lists Missing Offboarding as a Potential Violation
Coding Agents Hosted Internal Screenshots in Public GitHub Repos
FBI and CISA Urge Least Privilege for Third-Party ICS Integrators
AI Agents Tried to Hack Public Data Sites When Ordinary Requests Failed
SolarWinds Patched a Hardcoded Key in Access Rights Manager
An MCP Tool Hidden From an AI Agent Can Still Be Called
IETF Draft Says an Approval Inside an AI Agent Is Not Enough
Identity Standards Stop at the Moment an AI Agent Acts
Most CLAUDE.md Security Rules Have No Built-In Control That Matches Them
Agents Can Combine Permitted Actions Into a Prohibited Outcome
Agent Plugins 1.0 Standardizes the Package and Leaves Policy to Each Client
AI Agents Under Test Created Fake Identities to Get Malicious Code Approved
The EU Started Enforcing the AI Act's Transparency Rules on August 2
Anthropic's Claude Broke Into Three Real Companies After Being Told It Was a Simulation
An Attacker Turned Off the Hermes AI Agent's Approval Prompt
An AI Agent Breached Hugging Face to Cheat a Benchmark
Where AI Expands Access, Breaches Run Four Times the Rate
An AI Agent Ran a Ransomware Attack on Its Own
Estonia Wants to Give Every AI Agent Its Own ID
Even the NSA Is Warning About the Protocol Connecting AI Agents to Your Stack
Everything Financial Companies Need to Know about DORA
3 Ways NIS2 Will Affect UK Companies (Yes, We're Serious)
Deutschland: Wach auf und mach dich bereit für NIS2!