Access Control stories
Governance concerns are pushing regulated firms to demand audit trails and human oversight as AI agents move into live operations.
Australian organisations are racing ahead with AI agents, but most still lack the identity controls needed to secure non-human users at scale.
Only about 10% of APAC organisations say their identity systems can fully secure AI agents, bots and service accounts.
A flaw in a widely watched Microsoft repository could have let attackers run code and steal secrets through GitHub Actions, Tenable said.
Its general release gives IT teams a single place to monitor and secure AI agents as shadow deployments spread across workplace software and cloud tools.
Attackers are exploiting help functions to reset credentials and bypass defences, putting entire networks at risk through a single call.
Operational gaps are emerging as most large companies push AI agents into production before staff believe they are ready.
The ranking highlights growing demand for governed AI tools in regulated sectors, where document control and auditability are becoming critical.
Technology leaders are being urged to tighten access controls as a Claude AI incident puts database safety and operational resilience under scrutiny.
It lets developers use AI coding tools without pasting sensitive credentials into prompts, reducing the risk of secrets leaking into logs or source control.
Regulated firms can now run AI inside existing workflow systems as Nintex’s latest K2 update keeps sensitive data off external services.
Rising AI use is widening attack surfaces, while most organisations still need nearly a month to recover from cyber incidents.
Accountants facing staff shortages may gain faster workflows, as Sage Intacct’s new agent exposes its calculations, sources and audit trail.
The new tool gives Copilot access to enterprise file stores without opening up records beyond existing permissions, cutting governance risk for users.
It aims to cut manual copying and pasting by letting AI assistants query live GRC records under existing user permissions.
Businesses face rising exposure as AI is used to sharpen phishing, while insecure in-house tools and weak controls widen attack surfaces.
Local firms in regulated sectors can now keep identity security data onshore as scrutiny over machine and AI access intensifies.
Most firms are deploying AI agents without proper oversight, leaving non-human identities exposed as security teams race to catch up.
Most Australian security teams lack confidence their controls can spot a compromised AI system, even as firms push assistants beyond pilots.
Customers will now get independent assurance that Nebula Global Services has tested its defences against common cyber threats across its systems.