Resources

AI | Machine IAM | Security

Black Friday Can’t Wait Six Days: New Research on Retail AI Agent Security

Introduction The biggest shopping weekend of the year leaves little room for disruption. A stalled checkout, broken payment integration, or delayed order can quickly turn into a lost sale. Yet new Akeyless research finds that retailers estimate it would take an average of 11 hours to detect a compromised or malicious AI agent, followed by […]

DevOps | Security

wfx: How 4,800+ Hijacked GitHub Accounts Scanned 61,000 Repos for Secrets

TL;DR: Beginning November 10, 2026, an automated campaign leveraged 4,837 compromised GitHub accounts to open probe pull requests across 61,764 repositories. In at least 1,806 confirmed repositories, attackers injected a 1,500-line shell payload (self-designated wfx) into GitHub Actions workflows, harvesting static CI/CD secrets, cloud IAM credentials, and AI developer tokens before reverting commits and deleting […]

AI Agents Are Open for Business. Is Retail Security Ready?

2026 State of AI Agent Identity Security in Retail

Webinar

The Deadline Moved. Your Risk Didn’t: Securing AI Agents Under the EU AI Act

The EU AI Act deadlines have moved, but AI agent identity risks remain. Join cyber law expert Dr. Ilia Kolochenko and Akeyless to explore regulatory requirements, access controls, and auditability.

Webinar

Beyond Secrets Management: Meet Akeyless and the Future of AI Identity Security

Live Expert Discussion Beyond Secrets Management: Meet Akeyless and the Future of AI Identity Security Date Thursday, November 12th Time 10 AM ET Format Live Discussion Duration 30 minutes As AI agents and machine identities continue to multiply, traditional approaches to managing credentials and access are struggling to keep up. How can organizations secure these […]

AI | InfoSec | Machine IAM | News

Railway Encrypted Its Customers’ Secrets but Attackers Decrypted Them Anyway

Summary: Railway’s October 2026 breach exposed a critical limitation of encryption at rest: attackers who compromise the systems authorized to decrypt secrets can obtain plaintext without breaking the encryption itself. Railway confirmed that some customer environment variables were decrypted, with up to 100,000 workspaces potentially affected. The incident also disrupted deployments and triggered widespread credential […]

AI | Machine IAM

SPIFFE for AI Agents: Workload Identity and the Access Problem

SPIFFE and SPIRE give AI agents verifiable workload identities. See how Akeyless protects signing keys, brokers short-lived access, and governs actions.

Akeyless Recognized in the 2026 Gartner® Magic Quadrant™ for Privileged Access Management

Inclusion in the analyst report comes as Akeyless extends its Runtime Identity Security platform from AI agents and machine identities into human privileged access

AI | Machine IAM | Security

The Myth of the Solved Secret: Why Credentials Are AI’s Most Dangerous Vulnerability

Summary AI security discussions often focus on prompt injection, model vulnerabilities, and patching. But one of the most immediate risks is much more familiar: compromised credentials. AI agents require credentials to access enterprise systems and can also discover credentials exposed elsewhere. Because agents operate at machine speed and scale, even short-lived credentials can provide enough […]

AI | Security

Anthropic’s Latest Threat Report Shows How AI Is Industrializing Secret Theft

Quick Answer: Anthropic’s September 2026 Threat Intelligence Report shows how AI is compressing the path from exposed credential to enterprise compromise. One suspected ShinyHunters affiliate scanned 1.8 million Android apps for hardcoded secrets, while related operators used AI to accelerate reconnaissance, token abuse, data collection, and exfiltration. For defenders, faster secret scanning is only part […]

Machine IAM

Gartner on AI Agent Security: The Case for Runtime Authorization

Summary: AI agent security requires controls that govern what agents actually do, even when they have legitimate access. A new Gartner report makes the case for independent runtime authorization that evaluates agent actions as they happen. Here’s why traditional identity and secrets management fall short, and how Akeyless Agentic Runtime Authority addresses the gaps. On […]

Akeyless Achieves FedRAMP Class D (High) Certification to Bring Modern Identity Security and AI Agent Safeguards to Federal Agencies

FedRAMP Certification through Second Front gives federal agencies a validated path to protect sensitive systems and data amid the shift toward machine and AI-driven access.