LIVE FEED
Cyera Acquires Oasis Security to Unify AI Agent Identity Control

Cyera Acquires Oasis Security to Unify AI Agent Identity Control

FIRST LOOK ATLAS OWASP MEDIUM Moderate risk · Monitor closely ▲ 7.2 Dark Reading

Cyera's $1 billion acquisition of Oasis Security aims to converge data security and identity management into a single control plane specifically designed for AI agents, redefining privileged access around business context rather than static roles. This closes a significant defender gap by addressing the lack of unified visibility over what AI agents can access and do, replacing the fragmented tooling that currently leaves agent identity and data exposure largely ungoverned. Realising the full benefit will require organisational maturity in agent inventory, policy definition, and integration across existing IAM and DSPM stacks.

CVE-2026-44112: OpenClaw Sandbox Escape and RCE

CVE-2026-44112: OpenClaw Sandbox Escape and RCE

ATLAS OWASP CRITICAL Active exploitation · Immediate action required ▲ 8.9 The Hacker News

Researchers at Cyera disclosed four vulnerabilities in OpenClaw, an AI agent runtime platform, that can be chained to achieve credential theft, privilege escalation, and persistent backdoor access. The attack chain, dubbed 'Claw Chain', exploits sandbox escapes, allowlist bypasses, and a spoofable ownership flag in the MCP loopback runtime to weaponise the agent's own privileges against the host environment. All four CVEs have been patched in OpenClaw version 2026.4.22 and users should update immediately.

◉ AI THREAT BRIEFING

Stay ahead of the threat.

Twice-weekly digest of critical AI security developments — every story mapped to MITRE ATLAS and OWASP LLM Top 10. Free.

No spam. Unsubscribe anytime.