Authorization

Weekly roundup covering CISA endpoint vulnerability alerts, zero trust SSE testing, DSPM and AI data security, sovereign storage partnerships, and AI security platform releases.

Varonis said its Data Security Platform received GovRAMP Authorization for state and local government cloud security requirements.

Netskope Threat Labs says OAuth authorization abuse persists after consent, and AI agents increase token exposure without review or rotation.

Microchip Technology received a BIS export license covering ECCN 3E001 and ECCN 3A001.a.7.b for Armenia-based FPGA R&D access.

SailPoint launched Agentic Fabric to extend Identity Security Cloud to AI agents, adding discovery, governance and real-time authorization controls.

Ping Identity commissioned KuppingerCole Analysts research on runtime authorization gaps for AI agents.

Unauthenticated access to DRC INSIGHT COS /v0/configuration lets same-network users modify config, enabling data exfiltration or disruption (CVE-2026-5756).

Netskope says most organizations lack visibility into AI activity and proposes accountability, MCP-based integration, monitoring, and training.

Weekly roundup covering object storage ABAC governance, telecom voice core modernization, network automation telemetry updates, and CISA vulnerability advisories alongside AI operations guidance.

Telos said its Xacta platform received full FedRAMP Impact Level High authorization after approval of Xacta.io and Xacta.ai modules.

FCC adds foreign-produced consumer routers to its Covered List, blocking new model authorizations while existing devices keep eligibility.

Weekly roundup covering network operations collaboration, infrastructure agent automation, and post-quantum security deployments plus related partnerships and cyber resilience.