---
title: "Security"
description: "181 posts about Security, summarised, each linking to the original."
---

# Security
> 181 posts about Security, summarised, each linking to the original.

## Articles

### [DXC integrates Claude into systems regulated industries rely on](https://yomu.fyi/post/dxc-integrates-claude-into-systems-regulated-industries-rely-on.md)
- Company: [Anthropic](https://yomu.fyi/company/anthropic.md)
- Published: Jun 26, 2026
- Type: Announcement

Anthropic and DXC Technology announced a multi-year global alliance to bring Claude into mission-critical systems used by banks, airlines, insurers, manufacturers, and government agencies. DXC will train tens of thousands of Claude-certified forward-deployed engineers, while adding its own curriculum for regulated, mission-critical environments to Anthropic Academy’s certification. DXC first used Claude internally, including as the default foundation model for DXC OASIS, an AI-native managed-services orchestration platform whose code was more than 95% generated by Claude and reviewed by engineers; DXC estimates this accelerated development tenfold. The alliance initially targets insurance, legacy modernization, cybersecurity, and application services, including an always-on security engineer subagent for security operations centers. OASIS serves more than 50 DXC customers, with broader rollout planned.


### [Long Story Short: I Found My Place Between Code and Community](https://yomu.fyi/post/long-story-short-i-found-my-place-between-code-and-community.md)
- Company: [Okta](https://yomu.fyi/company/okta.md)
- Author: Aasawari Sahasrabuddhe
- Published: Jun 24, 2026
- Type: Announcement

Aasawari Sahasrabuddhe describes moving from backend software development into developer relations after finding that coding alone felt incomplete. Her DevRel work combines community engineering, content creation, strategy, workshop building, technical writing, hands-on workshops, and public speaking, while retaining a technical base in Java, Quarkus, and Spring Boot. She also discusses deeper interests in containers, Kubernetes, Docker, CI/CD, and GitOps, along with recognition as a MongoDB Champion for community contributions. The announcement introduces her move to Okta, where she wants to examine the intersection of identity, security, and AI, including how identity supports trust, access, and governance for AI systems. She frames this role as a way to stay close to community while continuing to work with code and content.


### [Palana (Part 1): Why Grab built a secure platform for autonomous AI Agents](https://yomu.fyi/post/palana-part-1-why-grab-built-a-secure-platform-for-autonomous-ai-agent.md)
- Company: [Grab](https://yomu.fyi/company/grab.md)
- Author: Kevin Littlejohn
- Published: Jun 19, 2026
- Type: Explainer

Palana is Grab’s Kubernetes-native platform for running autonomous and semi-autonomous agents with isolation, controlled access, and operational oversight. The post describes why laptop-based tools and simply running agents in containers do not adequately address persistent state, identity, credentials, network access, auditability, and emergency control. Its architecture gives each agent a namespace, service account, storage, network policy, and Vault scope, while Envoy, ext-authz, and OPA mediate and log HTTP(S) egress; proxy-only secrets keep underlying credentials out of agent processes. A portal and pcli manage lifecycle, and external kill switches and idle shutdown provide controls outside the agent. Palana is used for development environments, Slack automation, framework testing, and long-running internal workloads, with deeper architecture details reserved for Part 2.


### [Announcing the Agentic Resource Discovery specification](https://yomu.fyi/post/announcing-the-agentic-resource-discovery-specification.md)
- Company: [Google](https://yomu.fyi/company/google.md)
- Author: Junjie Bu, Srinivas Krishnan
- Published: Jun 17, 2026
- Type: Announcement

Agentic Resource Discovery (ARD) is an open specification for publishing, discovering, and verifying AI capabilities across the web, addressing the lack of a standard that works across organizations and ecosystems. It uses organization-hosted catalogs, including an ai-catalog.json file at a well-known domain path, plus federated registries that crawl, index, and return capabilities with trust metadata. Clients can query a registry with plain-language intent or fetch a known catalog directly, verify the publisher’s cryptographic identity, then connect at runtime through the capability’s native protocol or API. Google Cloud is bringing ARD to Gemini Enterprise Agent Platform through Agent Registry, which supports hosted discovery and governance features including namespaced URNs, egress policies, specification pinning, and Agent Identity trust-manifest verification. The specification is available under Apache 2.0, with native Agent Platform support planned in the coming months.


### [Enhance Security and Trust: New Session Metadata in Sign in with Google](https://yomu.fyi/post/enhance-security-and-trust-new-session-metadata-in-sign-in-with-google.md)
- Company: [Google](https://yomu.fyi/company/google.md)
- Author: Sergei Akulich, Brian Daugherty
- Published: Jun 16, 2026
- Type: Announcement

Sign in with Google now provides verified applications with two OpenID Connect session metadata claims, auth\_time and amr, in ID tokens. auth\_time records the last successful Google authentication time, distinguishing session freshness from token issuance, while amr is a JSON array identifying authentication methods such as pwd, mfa, hwk, swk, tel, and sms. The claims are available across Android, iOS, and web client and server applications, and can support audit logging, step-up authentication based on session age, and authorization rules requiring stronger methods for sensitive operations. Verified applications request them through the standard OIDC claims parameter without significantly changing an existing Sign in with Google authentication flow.


### [Building Agents that Don't Break Themselves](https://yomu.fyi/post/building-agents-that-don-t-break-themselves.md)
- Company: [Fly.io](https://yomu.fyi/company/fly-io.md)
- Published: Jun 8, 2026
- Type: Problem & solution

Agents that call shell commands can damage their host, so the post separates the agent’s durable home from the environment where untrusted code executes. It presents Sprites as disposable, isolated sandboxes, with one Sprite per session for the multi-user SpriteDoc and one persistent Sprite per task for Hermes Agent. SpriteDoc injects each user’s flyctl credential only for the command that needs it, avoiding token storage while preserving the user’s permissions; Hermes can omit approval prompts because the sandbox protects the host. The same separation applies when Hermes itself runs inside a Sprite: its commands are dispatched to another Sprite with a different identity and boot. Copy-on-write checkpoints provide an undo path, restoring deleted files and tools in about nine seconds.


### [The One Where I Found My Way to DevRel](https://yomu.fyi/post/the-one-where-i-found-my-way-to-devrel.md)
- Company: [Okta](https://yomu.fyi/company/okta.md)
- Author: Zahwah Jameel
- Published: Jun 5, 2026
- Type: Announcement

The author recounts a career path from creative interests and technical writing to developer relations, emphasizing that storytelling remained central while the audience changed. She began by producing API documentation, user guides, onboarding content, and other developer resources, then joined JDoodle, where conversations with developers shifted her focus from writing for them to connecting with them. Attending events and conferences, giving product demos, staffing booths, participating in community conversations, organizing hackathons, and running internal events helped her discover that developer advocacy matched her strengths in empathy, clear storytelling, and helping people succeed. She now announces a new role at Okta, where she will work with developers, creators, builders, and community members in identity and security while creating content, attending events, learning, and building connections.


### [Building a File Semantic Analyzer: Guarding Outbound Data at Scale with AI](https://yomu.fyi/post/building-a-file-semantic-analyzer-guarding-outbound-data-at-scale-with.md)
- Company: [Uber](https://yomu.fyi/company/uber.md)
- Published: Jun 4, 2026
- Type: Problem & solution

Organizations struggled to determine whether files leaving their environment contained business-critical information, personal data, or non-essential content. Uber’s File Semantic Analyzer (FSA) addresses the limits of keyword- and pattern-based DLP by extracting text from documents, using OCR for image-based files, chunking large inputs, and sending context-rich text to a fine-tuned large language model. The model produces summaries, named entities, key phrases, inferred intent, classifications, and explanations, which a rule-based engine uses for policy enforcement while analysts validate high-fidelity findings and provide feedback. The system reduced incident-response time from multiple hours to a few minutes per case, saves an average of five minutes per file, and is expected to analyze 150,000 files annually; the post reports a 97% reduction in false positives.


### [Introducing organizations for Cursor Enterprise](https://yomu.fyi/post/introducing-organizations-for-cursor-enterprise.md)
- Company: [Cursor](https://yomu.fyi/company/cursor.md)
- Author: Cursor
- Published: Jun 3, 2026
- Type: Announcement

Cursor is introducing organizations, a top-level structure that lets Enterprise customers manage multiple teams, budgets, security policies, governance, and feature controls from one dashboard. Organizations contain teams for departments or subsidiaries and groups for user cohorts; separate configurations can govern model access, spending, agent permissions, and network access, while the most permissive setting applies when users belong to multiple teams or groups. The organization dashboard aggregates spend and token usage across teams and supports filtering by team, user, service account, or cloud agent, while identity-provider and SCIM setup is centralized and membership can be managed through the dashboard, API, or CSV. Generally available to all Enterprise customers, the structure supports sandbox teams for testing features, scoped administration and chargebacks, and differentiated controls across functions; Cursor says policy controls, onboarding, and SCIM-driven assignment are still being expanded.


### [Use Passkeys Wherever You Sign in to Uber](https://yomu.fyi/post/use-passkeys-wherever-you-sign-in-to-uber.md)
- Company: [Uber](https://yomu.fyi/company/uber.md)
- Published: May 26, 2026
- Type: Explainer

Uber rolled out passkey authentication across mobile apps and websites, allowing users to sign in without passwords. Passkeys use a device-generated public-private key pair: the server stores the public key, while the device’s password manager protects the private key and requires biometric, PIN, or pattern authorization. Registration sends creation options and a challenge to the authenticator, which returns an attestation for server validation; sign-in similarly returns a signed assertion that the server verifies with the stored public key. This design keeps private keys and user authorization data on the authenticator, improving resistance to phishing, credential stuffing, brute force, and replay attacks. Uber reported low initial adoption and noted inconsistent browser and device support, user education needs, and technical complexity; it plans to use adoption data and post-authentication prompts to improve onboarding.


### [How we contain Claude across products](https://yomu.fyi/post/how-we-contain-claude-across-products.md)
- Company: [Anthropic](https://yomu.fyi/company/anthropic.md)
- Published: May 25, 2026
- Type: Explainer

Anthropic describes how it contains Claude across claude.ai, Claude Code, and Claude Cowork as model capabilities and access expand the potential blast radius of autonomous agents. It distinguishes user misuse, model misbehavior, and external attackers, then assigns defenses across the agent’s environment, the model, and external content such as MCP servers, plugins, and web results. The main containment patterns include ephemeral gVisor containers for claude.ai, while Claude Code’s sandboxing and Cowork’s virtual-machine design tailor isolation to different users and capabilities. Reported measurements show Claude Opus 4.7 at roughly 0.1% attack success on single prompt-injection attempts and Claude Code auto mode catching roughly 83% of overeager behaviors, but neither replaces hard environmental boundaries. The conclusion favors mature isolation primitives, least-necessary access, and defense in depth because probabilistic safeguards can miss failures and permitted egress can still expose data.


### [How security teams can report cyber risk to boards](https://yomu.fyi/post/how-security-teams-can-report-cyber-risk-to-boards.md)
- Company: [Databricks](https://yomu.fyi/company/databricks.md)
- Author: Taylor Kain
- Published: May 22, 2026
- Type: Explainer

Boards are seeking visibility into cyber risk, but technical reports often fail to connect security posture with business impact or financial exposure. The post explains that compliance and cyber risk leaders can use Databricks Genie to query vulnerability posture, asset criticality, threat intelligence, control data, and historical incident costs in a governed environment. It recommends probabilistic financial modeling, including Monte Carlo simulation, to run randomized attack scenarios and produce loss distributions; Value-at-Risk framing can make those results familiar to directors. This approach replaces qualitative red/amber/green reporting with expected-loss ranges, supports investment prioritization, and enables trend analysis and board-ready answers, while the suggested cadence combines quarterly strategic briefings, monthly operational reviews, and incident-triggered updates.


### [Stop rogue AI: How Unity Catalog secures your agent actions](https://yomu.fyi/post/stop-rogue-ai-how-unity-catalog-secures-your-agent-actions.md)
- Company: [Databricks](https://yomu.fyi/company/databricks.md)
- Author: Ahmed Bilal
- Published: May 19, 2026
- Type: Problem & solution

Agentic AI systems connected to external tools can take destructive production actions while operating within delegated authority, yet without restrictions on tool selection or records of their calls. Unity Catalog now governs MCP tools with fine-grained access control, service policies, and payload logging, while Unity AI Gateway enforces decisions in real time. Policies are SQL functions receiving actor and context information; they can allow, deny, or require user consent, inspect arguments and caller properties, and block calls before execution. Every tool call is recorded in a Unity Catalog-managed Delta table with the tool name, arguments, result, user identity, and allow-or-deny status, making the activity queryable with SQL. The service policies and payload logging are available as a Gated Beta, with early access offered through Databricks account teams.


### [Development environments for your cloud agents](https://yomu.fyi/post/development-environments-for-your-cloud-agents.md)
- Company: [Cursor](https://yomu.fyi/company/cursor.md)
- Author: Samantha Whitmore, David Wetterau & Nick Bradford
- Published: May 13, 2026
- Type: Announcement

Cloud agents need development environments with repositories, dependencies, credentials, and build-system access to test, query services, and verify engineering work rather than merely write code. The release adds reusable multi-repo environments, allowing agents to work across microservices codebases and deliver, test, and verify changes spanning repositories. It also improves Dockerfile-based configuration with build secrets scoped to build steps and layer caching that makes cache hits run 70% faster. Cursor can inspect repositories, determine required tools and dependencies, and generate editable Dockerfile configurations, while its setup flow checks credentials and validates environments; this generator is in private beta. Governance features include environment-specific version history, rollback controls, audit logs, egress allowlists, and isolated secrets, while failed configurations fall back to a base image and work continues.


### [Mean time to detect is a data access problem](https://yomu.fyi/post/mean-time-to-detect-is-a-data-access-problem.md)
- Company: [Databricks](https://yomu.fyi/company/databricks.md)
- Author: Taylor Kain
- Published: May 7, 2026
- Type: Problem & solution

Security operations centers measure MTTD, MTTR, false-positive rates, and analyst utilization, yet investigations often stall because analysts assemble evidence across fragmented systems. A single alert may require separate queries for logs, identity records, asset information, prior alerts, and cross-source timelines, making the analyst the integration layer and creating an MTTI bottleneck. The post presents Lakewatch with Databricks Genie as an agentic interface powered by Anthropic Claude models: analysts ask natural-language questions while autonomous agents hunt, summarize, correlate, and reconstruct timelines across security, IT, and business data. It argues that this architecture can reduce investigation work from manual, multi-system workflows to answers in seconds, while retaining analyst-level access controls and governed data access as exploit time has shrunk to 1.3 days.


### [Agentic identity: modeling agents to keep users in control](https://yomu.fyi/post/agentic-identity-modeling-agents-to-keep-users-in-control.md)
- Company: [Ramp](https://yomu.fyi/company/ramp.md)
- Author: Steve Venzerul, Rachel Kaplan
- Published: May 4, 2026
- Type: Problem & solution

Ramp for Agents adds CLI and MCP interfaces through which AI agents can manage cards, bills, expenses, and approvals, creating a need to represent agents as accountable actors instead of handing them users’ session tokens or API keys. The initial identity model links a named Agent Key to a human sponsor and business, bounds scopes by the sponsor’s role, records agent attribution, and adds expiration and revocation. Ramp extends RBAC and its DenormalizedActor audit model with AgentContext, so logs, approvals, and webhooks can distinguish “Sarah (via Codex)” while reusing existing permissioning and rendering paths. OAuth2-PKCE exchanges the Agent Key for short-lived access and refresh tokens, with re-validation during refresh to limit leaked-credential exposure and preserve session traceability. The first release uses on-behalf-of-user agents because they fit current demand and keep a human accountable, while admins can oversee keys or disable agent access for roles and groups.


### [Alert fatigue is a business risk](https://yomu.fyi/post/alert-fatigue-is-a-business-risk.md)
- Company: [Databricks](https://yomu.fyi/company/databricks.md)
- Author: Taylor Kain
- Published: Apr 30, 2026
- Type: Announcement

Enterprise security operations centers may receive tens of thousands of alerts daily, making prioritization necessary and leaving lower-priority signals uninvestigated. Alert fatigue is presented as a data architecture problem: fragmented endpoint, network, identity, and cloud telemetry, combined with proprietary SIEM collection-and-discard practices, limits correlation and overwhelms analysts. Lakewatch proposes an open lakehouse foundation that unifies security, IT, and business telemetry, applies automated OCSF normalization, and uses Agent Bricks for data wrangling and alert triage. Databricks Genie is positioned as a natural-language AI security agent whose autonomous agents can hunt, summarize, and neutralize threats, while Unity Catalog logs queries and actions for audit and forensic purposes. Lakewatch is currently available in Private Preview.


### [Built in, not bolted on: What AI-native actually means in cybersecurity](https://yomu.fyi/post/built-in-not-bolted-on-what-ai-native-actually-means-in-cybersecurity.md)
- Company: [Databricks](https://yomu.fyi/company/databricks.md)
- Author: Aly McGue
- Published: Apr 28, 2026
- Type: Explainer

The discussion defines AI-native cybersecurity applications as systems architected with intelligence at their core, rather than traditional products with AI added later. It links tool sprawl to slower threat detection and response and argues that proprietary, context-rich security telemetry is the foundation for adaptive defense. Barracuda uses Databricks to consolidate fragmented data, normalize schemas, support real-time streaming detection, run ML operations through MLflow, and power natural-language log search across billions of security events with strict data isolation. The work began by defining customer outcomes, then progressed through incremental delivery; normalized data enabled models and agents to use cross-domain context. This approach extended across WAF-as-a-service, automated configuration, API security, and bot protection while shared outcomes aligned product, data science, engineering, and business teams.


### [Putting Fairness in the Driver’s Seat](https://yomu.fyi/post/putting-fairness-in-the-driver-s-seat.md)
- Company: [Uber](https://yomu.fyi/company/uber.md)
- Published: Apr 27, 2026
- Type: Announcement

Uber describes its deactivation principles and safeguards for drivers and couriers, motivated by the stress of losing app access and the need for decisions that are fair, accurate, and transparent. Most access issues are temporary, while permanent deactivations are described as rare and intended to protect platform safety; users should receive notice, relevant details, and an opportunity to respond whenever possible. The updated process lets drivers view eligible reports, submit context including Record My Ride audio or video, and have reports reviewed alongside their information, while systems filter suspected fraudulent or false claims. The Review Center explains deactivation reasons and appeal options, supports uploads, and sends every appeal to a real person, with additional measures including excluding low ratings caused by factors outside a driver's control, limiting trip categories when appropriate, and covering third-party testing for disputed impairment claims.


### [Data Governance Platforms: Evaluation & Feature Guide](https://yomu.fyi/post/data-governance-platforms-evaluation-feature-guide.md)
- Company: [Databricks](https://yomu.fyi/company/databricks.md)
- Author: Databricks Staff
- Published: Apr 21, 2026
- Type: Tutorial

This guide presents a framework for evaluating data governance platforms for enterprise deployment, distinguishing governance—the policies, roles, and controls for data use—from data management, the operational execution of those policies. It recommends assessing metadata-centered capabilities including continuous data profiling, catalog search and enrichment, end-to-end lineage, RBAC and ABAC, sensitive-data detection, masking, audit trails, compliance reporting, and data-subject request workflows. Vendor assessment should also cover pre-built connectors, REST APIs and SDKs, near-real-time metadata synchronization, schema-drift handling, cross-cloud federation, usability, support, implementation timelines, and three-to-five-year total cost of ownership. The proposed decision process selects three leading candidates, pilots them with representative structured and unstructured datasets, defines quality, lineage, adoption, and exit metrics, and uses executive review before procurement; governance is framed as an ongoing program that expands with AI workloads and regulatory change.


[Newer posts](https://yomu.fyi/topic/security/page/5.md) · [Older posts](https://yomu.fyi/topic/security/page/7.md)