Skip to Content

July 2026

5 August 2026 by
Tiberiu-Septimiu Ungurianu
Brought to you by Third Wave Identity

🔐 SailPoint Identity Security Cloud – July 2026 Highlights

AI Agent Access Visibility in CIEM

31 July 2026 — CIEM now displays access paths for major AI agents, helping organisations remove unnecessary privileges.

MCP Server Integration Improvements

24 July 2026 — MCP Server now supports OAuth 2.1 with PKCE and a global endpoint for secure client integrations.

AI Privilege Discovery

10 July 2026 — AI-driven recommendations help administrators identify and monitor high-risk privileged access.

Harbour Pilot Temporary Access Requests

10 July 2026 — Harbour Pilot now supports natural-language requests for temporary and future-dated access.

Databricks Data Access Security Connector

10 July 2026 — The new Databricks connector strengthens governance through permission analysis and data classification.

🔐 Idira (CyberArk) – July 2026 Security Highlights

Multi-Component Remote Code Execution and Credential Theft Risk

22 July 2026 — A high-severity flaw could enable remote code execution, credential theft and sensitive-data exposure.

PVWA Data Integrity and Application Stability Vulnerabilities

15 July 2026 — PVWA fixes address data-parsing and object-manipulation issues affecting integrity and stability.

PVWA Application Proxy and Sensitive-Data Exposure

15 July 2026 — A PVWA flaw could expose internal services and sensitive information through an application proxy.

Potential Vault Compromise Through the Remote Control Client

8 July 2026 — A Remote Control Client vulnerability could lead to Vault compromise without an available temporary mitigation.

Unauthorised Vault Access Through RADIUS Authentication

8 July 2026 — A RADIUS authentication flaw could allow unauthorised access to self-hosted Vault environments.

🌐 Delinea - StrongDM – July 2026 Highlights

AWS Workload Identity for MongoDB Atlas

23 July 2026 — StrongDM can now authenticate to MongoDB Atlas using AWS workload identities from its nodes.

Expression-Based Access Rules

17 July 2026 — Administrators can create advanced tag-based access rules using AND, OR and NOT expressions.

Managed Website Certificate Generation

16 July 2026 — A new Admin UI button simplifies certificate generation for managed websites.

Granular Session and Idle Timeouts

14 July 2026 — Organisations can now apply more precise session and idle timeout policies.

Expanded TLS Certificate Controls

2 July 2026 — Administrators can configure certificate verification, custom CA bundles and insecure TLS options.


Tiberiu-Septimiu Ungurianu 5 August 2026
Share this post
Archive