Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Choosing the right deployment model for your Identity Governance and Administration (IGA) system is a high-stakes decision that affects many aspects of your organization. It determines how you manage access across your entire enterprise. It also dictates your audit readiness and integration capabilities. Now you might assume that the cloud is the only modern option. However, many organizations are changing their infrastructure strategies.

This post is an unfortunate affirmation of our prior research into abandoned open-source packages, where we found that 11% of the most-downloaded packages have been abandoned and not actively maintained, becoming invisible vulnerabilities to your scanner. Today we share a zip-slip vulnerability we found in extract-zip (CVE-2026-19693), an npm package with over 20 million weekly downloads.

AI productivity tools are creating a prompt-level data leakage problem: 77% of employees paste data into generative AI tools, and 82% of that activity comes from unmanaged accounts, according to the LayerX Enterprise AI and SaaS Data Security Report 2025. Every paste into ChatGPT, Copilot or another GenAI tool is a potential exposure of sensitive data that traditional file-focused controls were never built to see.

APIs are now the primary attack surface for most applications. Industry research consistently shows that the large majority of organizations have experienced an API security issue in the past year, and a significant share have delayed a rollout because of API security concerns.

AI system evaluation is the process of continuously assessing AI system capabilities, limitations, and performance through quantitative and qualitative measures. Across the system lifecycle, evals provide continuous assurance: Validating system behavior before deployment and detecting drift, bias, and reliability issues in production.