Volume 343, Issue 2 · 6 articles from 2 issues
Cyera's product roundup covers Oasis Security identity integration, Learned Policies, Cy updates, Omni DLP and new integrations.
Cyera outlines product updates that combine data and identity signals to govern agentic access.
Highlights include integrating Oasis Security, which Cyera acquired this month, to discover and govern non-human identities and provide Agentic Access Management; Learned Policies that turn organization-specific risks into policies; new Cy assistant capabilities; Omni DLP noise-reduction visibility; new integrations; and Cyera DSPM availability on Snowflake Marketplace.
Cyera cites joint research with the Cloud Security Alliance showing non-human identities at Fortune 500 companies grew nearly 500% in the first half of 2026.
Cyera argues that frontier-model agents can act unsupervised across many steps, so their blast radius is set by what data they can reach.
Cyera describes frontier AI as the fast-moving edge of model capability, where agents can now hold a goal across dozens of steps and systems, recover from dead ends and run with far less supervision.
Unlike scripted bots whose actions are enumerable, a reasoning agent's blast radius is defined by everything it can access, not what it was built to do.
The post argues that this makes data access governance the central security question as enterprises deploy frontier-model agents.
Cyera argues agentic risk lies in the path linking sensitive data, agent authority and destinations, not in isolated findings.
Cyera says treating risk as a list of isolated findings breaks down when AI agents can connect sensitive data, authority to act and external destinations in a single continuous action.
Drawing on OWASP's concept of excessive agency, it argues the key question shifts from who can access data to what can happen after access is granted, such as copying a file into an externally shared folder.
The post urges security teams to trace actionable exposure across data, identities, agents, tools and downstream systems.
Cyera recaps where industry analysts split on governance-first versus runtime-first AI security and where they agree.
Drawn from the opening session of Cyera's AI Webinar Week, the post says analysts are divided on whether AI security should start with governance programs or runtime controls, while practitioners argue both are needed.
Analysts converge on AI security being rooted in data security, citing Forrester's first Wave for sensitive data discovery and IDC's framing that data quality plus data security equals data trust.
The session also concluded that agentic AI breaks today's identity model, making authorization, behavior and intent the next control points.
Cyera explains why clinical trial approval depends on an unbroken, trustworthy data trail across many vendors and systems.
Cyera argues that regulators approving a drug are really evaluating the integrity of its data trail.
Modern clinical trials span CROs, trial sites, electronic data capture, lab platforms, genomic pipelines and cloud storage, often a dozen vendors deep, and every handoff risks duplicated records, missing timestamps or values that drift from the original.
The post covers the overlapping regulatory rulebooks life sciences firms face and how data security supports compliance.
Cyera Research tested OpenAI's always-on dot agent and outlines risks from prompt injection to agent drift for admins.
Cyera researchers spent over a week living with OpenAI's dot, a persistent agent built on GPT-6 Astra with its own cloud computer, memory and connected apps, which performs proactive research across those apps and reaches users through ChatGPT, Slack, Teams and voice.
Cyera examined what a dot can access and what happens when someone other than its owner instructs it.
The research details prompt injection and agent drift risks and how administrators can contain them.