Identity security news
Summaries of public announcements, with links to the original source. Updated monthly.
SHORT ANSWER
Editorial assessment · Desk research from public vendor material · Reviewed 2026-09-29
2026-09-22Okta
Okta lists Agent SSO as generally available
In its September product announcement Okta listed Agent SSO, with short-lived tokens, and Agent-to-Agent Connections as available now, with Agent Gateway and Shadow AI Agent Discovery for Endpoints announced on 22 September 2026 as planned for Q3 2026 (https://www.okta.com/newsroom/press-releases/ai-innovations-oktane-2026/).
Source: Okta newsroom, 22 Sep 2026
2026-09-22Okta
Okta and partners publish a reference architecture for agent security
Okta and companies including AWS, CrowdStrike, Docker, Google Cloud, Salesforce and Zscaler formed the Blueprint Alliance around four questions: where agents are, what they can do, what they are doing and how to respond.
2026-09-15NIST
NIST IR 8587 on token protection is final
NIST published the final version of IR 8587, Protecting Tokens and Assertions from Forgery, Theft, and Misuse, with recommendations for identity providers, authorization servers, key management and token verification.
Source: NIST IR 8587
2026-09-15NewCore
Former Microsoft identity president Joy Chik joins NewCore's board
NewCore said Joy Chik, previously President of the Identity and Network Access Business at Microsoft, has joined its board of directors.
2026-09-01Ping Identity
Ping adds controls for personal AI agents such as Claude
Ping Identity announced Enterprise Personal Agent Access, applying identity and authorization policy at runtime to discover, control and monitor personal agents.
Source: Ping Identity press, 1 Sep 2026
2026-06-30Astrix Security
Astrix ends standalone sales after joining Cisco
Astrix Security, now part of Cisco, states that it ended standalone sales of new licenses effective 30 June 2026 and that existing customers keep the service in their current agreements.
Source: Astrix Security
2026-06-16Ping Identity
Ping extends Runtime Identity for agents to AWS, Google Cloud and Cloudflare
Ping announced integrations that carry continuous authorization and policy enforcement for AI agents into AWS, Google Cloud and Cloudflare environments.
Source: Ping Identity press, 16 Jun 2026
2026-06-15NewCore
NewCore launches with $66M
NewCore came out of stealth with $66M from Cyberstarts, Index Ventures and Evolution Equity Partners, describing an identity provider for people and AI agents built to run alongside existing federations.
2026-05-27Ping Identity
Ping announces agent discovery and Programmable Identity
Ping announced Programmable Identity through MCP, CLI and APIs, Agent Discovery and Governance, and Privileged Access for Desktop Agents, noting availability varies by product and region.
Source: Ping Identity press, 27 May 2026
2026-05-13OWASP
OWASP explains memory poisoning in its agentic Top 10
An OWASP GenAI Security Project article described ASI06, Memory and Context Poisoning, one entry in the OWASP Top 10 for Agentic Applications published in December 2025.
Source: OWASP GenAI: Memory is a feature, it is also an attack surface
2026-04-14OWASP
OWASP launches FinBot, a capture-the-flag for agent security
The OWASP GenAI Security Project released FinBot CTF as a hands-on companion to its guidance.
Source: OWASP GenAI: FinBot CTF is live