Cyera

Earlier today, OpenCode said external AI provider keys linked to affected Console workspaces may have been exposed. Some users are already reporting charges they didn’t make. 4 actions to prioritize: • Ask your developers whether they received a notice from OpenCode • Revoke and reissue impacted keys directly in OpenAI, Anthropic, Google, and other provider dashboards. • Investigate unusual usage and set spend limits and alerts immediately. • Map every key to an owner, the tools it powers, and the data it can access. The broader lesson: AI agents and coding tools increasingly operate with credentials that can spend money and reach sensitive data. They need the same controls that are standard for any other privileged identity. We’re updating our guide as the story develops: https://lnkd.in/eBhJMtfR

Today, our employees' agents query Snowflake 26 million times per day. And that number doesn't scare us. That's because before putting agents in the hands of 1,500 employees, we traced nested and chained Snowflake roles. The results surprised us: We uncovered “read-only” paths that could actually reach sensitive data. Even a “read-only” role can still lead somewhere it shouldn’t. Read more on how we securely rolled out AI: https://lnkd.in/e9H2t6sK

“Chasing every AI model and every agent right now is mission impossible. What you can focus on is, A, the endpoints that are in your control, and B, the resources and the data you’re trying to protect.” That was the advice given by Danny Brickman, our Chief Business Officer, on stage at EY’s Journey in Tel Aviv, where he joined Yifat Oron of Blackstone, Gili Raanan of Cyberstarts, and Yevgeny Dibrov of Armis to talk about the lessons learned building a global cyber company and how to approach AI security. On AI security, his advice starts with two questions: which endpoints do you control, and where the data you’re protecting live? Which one is harder for your team to answer right now?

An agent can take hundreds of actions before a person would even finish one. That’s why teams love them, and exactly why most security processes can’t keep up. Cyera is built for agent speed, and it’s now available in the Anthropic Claude Marketplace. Inside Claude environments, Cyera Agent Guardian gives security teams real-time visibility into every agent in use, sanctioned or shadow, and intercepts out-of-policy commands, unapproved database changes, and unauthorized transfers before they execute. Your teams don’t have to choose between speed and control. You get both, and now you can apply a portion of your committed Anthropic spend to Cyera. See the listing: https://lnkd.in/eDGqjgUg Learn more: https://lnkd.in/ers74Cvz

Cyera just landed #3 on Fortune’s Best Workplaces in Technology and made LinkedIn’s Top Startups lists in the United States, Israel, and Chicago. Every company wants to say yes to AI. They can’t until they control what every human, machine, and agent can see, access, and do. That’s the problem we get up for every morning, and it’s why the best people keep showing up to help us solve it. Thank you to the Cyera team who earned this, and to the customers and partners who trust us with their data. https://lnkd.in/p/eEKCDAjk · https://lnkd.in/e9VFEYqY

AI deployment works best when the business owns the decision, not just the people building it. Alex J. Attumalil, Global CISO at Under Armour, joins Ash Hunt on this episode of The Watchtower to make the case that successful AI adoption starts with a business decision, and technology is how you get there. Owning that decision means seeing exactly what your data and your AI are doing, not just whether the technology works. Get that visibility right, and AI becomes a lot easier to trust, and a lot easier to scale. Full episode: https://lnkd.in/edyjXjXR

At datasecAI 2026, you can walk away certified by Cyera's AI Security School. Alex Dunne and Michael Ferguson are leading hands-on sessions built around what you can bring back to your team, alongside other practitioners working through the same problems. Join us this November in Dallas: datasecai.io

Ignoring AI was never an option for Cyera. That left us with one big challenge: how to give 1,500 employees secure access to Claude. Joe Tustin from Cyera’s applied AI team shares three keys to a successful AI rollout. These are the hard-earned lessons you need if you’re in the middle of deploying AI. https://lnkd.in/dkYDGzNF

Cyera's CEO & Co-Founder, Yotam Segev, is taking the stage at Les Assises. Tune in below ⬇️

Attackers have been hiding cryptomining malware inside PostgreSQL databases since 2023. The Linux versions weren't flagged by a single antivirus engine. After we disclosed a major, 12-year-old PostgreSQL flaw last month, Cyera Research went hunting for malicious extensions in the wild. We found 20 across Windows and Linux, all tied to one campaign from a cryptomining group active since at least 2018. We believe it's the first published analysis of this attack. Our findings raised an even bigger question: databases are big targets, and PostgreSQL is just one database. What's running in yours? https://lnkd.in/ewP_itCj