Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Inside CyberArk Labs: the evolving risks in AI, browsers and OAuth

In 2025, we saw attackers get bolder and smarter, using AI to amplify old tricks and invent new ones. The reality is, innovation cuts both ways. If you have tools, AI is going to make them even more dangerous. Last year proved that every leap forward in technology brings new risks right alongside the rewards. At CyberArk Labs, our mission is to uncover hidden vulnerabilities and provide actionable insights that help organizations fortify their defenses.

Access Governance: How to Track Access, Approvals, and Revocation with Audit Logs

As organizations continue to adopt more SaaS applications, managing access across those systems has quietly become one of the most complex operational challenges for IT teams. Identity providers, collaboration tools, cloud platforms, and business applications all have their own access models, their own admins, and their own ways of tracking permissions. In most organizations, there still isn’t a truly streamlined or automated way to handle access end to end.

Will AI agents 'get real' in 2026?

In my house, we consume a lot of AI research. We also watch a lot—probably too much—TV. Late in 2025, those worlds collided when the AI giant Anthropic was featured on “60 Minutes.” My husband tried to scroll past it, but I snatched the controller away, unable to resist a headline calling out the first widely acknowledged case of an “agentic AI cyberattack.” The framing itself was irresistible, a milestone moment in the rapid acceleration of AI.

Tame the Vault Sprawl: Bring All Your Secrets Under Control in 60 Seconds

This 60-second video highlights the growing challenge of secret sprawl—developer-created vaults, duplicate credentials, and inconsistent security policies scattered across cloud environments. It shows how this fragmentation increases risk, complicates compliance, and opens the door to breaches. The video introduces CyberArk Secrets Hub as the solution: a centralized, policy-driven platform that unifies visibility, enforces standards, automates rotation, and preserves existing cloud-native and HashiCorp workflows. The result? Simplified oversight, stronger security, and audit-ready operations.

Zero Trust Implementation: Why it Matters and How to Implement

Zero Trust is a security mindset and architecture that assumes no user, device, or network is inherently trustworthy, requiring continuous verification for every access request. Unlike a single tool or product, it requires a holistic strategy that integrates strong identity controls, such as MFA and least privilege access. Success with Zero Trust hinges on cultural shifts, executive buy-in, and ongoing adaptation to threats that emerge beyond the initial setup.

PunchOut Integration with Shopify: Everything You Need To Know

B2B buyers today expect corporate procurement to feel as seamless as shopping online on any modern ecommerce store, but with the higher control, stronger compliance, and streamlined approval workflows their companies require. They don’t want to toggle between supplier websites, manually handle product details, or deal with pricing inconsistencies.

Authenticate Users in Joomla Using the REST API: A Practical Guide for Developers

Modern Joomla applications are no longer limited to traditional website workflows. Today, Joomla powers mobile apps, headless frontends, third-party integrations, and backend services that rely heavily on REST APIs. In all these cases, secure API authentication becomes a foundational requirement.

EP 22 - Security at the speed of innovation: Breaking down legacy barriers

How are defenders supposed to keep up when attackers move at the speed of AI? In this episode of Security Matters, host David Puner welcomes Rick McElroy, founder and CEO of Nexasure, for a candid conversation about cybersecurity’s breaking point. Together, they unpack the realities of defending organizations in an era of identity sprawl, machine risk, agentic AI, and relentless automation. Rick shares hard-won insights from decades on the front lines, challenging the myth of perfect defense and revealing why identity remains at the root of most breaches.

EP 22 - Security at the speed of innovation: Breaking down legacy barriers

How are defenders supposed to keep up when attackers move at the speed of AI? In this episode of Security Matters, host David Puner welcomes Rick McElroy, founder and CEO of Nexasure, for a candid conversation about cybersecurity’s breaking point. Together, they unpack the realities of defending organizations in an era of identity sprawl, machine risk, agentic AI, and relentless automation.