🔐 SailPoint Identity Security Cloud – May 2026 Highlights
22 May 2026 — SailPoint introduced a Claude Enterprise connector, enabling aggregation of users, groups, roles, and managed agents to support governance of AI-driven enterprise environments.
15–22 May 2026 — SailPoint expanded Quick Compliance support across multiple SaaS platforms, making it easier to configure read-only account and entitlement aggregation.
15 May 2026 — Administrators and Compliance Managers can now configure automatic revocation campaigns for SharePoint Online and OneDrive records.
8 May 2026 — Workflow history and lifecycle events are now available in Search, with new Manager and Executions views improving operational visibility.
1 May 2026 — Harbour Pilot now supports natural language access requests on behalf of another user, helping streamline onboarding and role-change workflows.
🔐 Idira (CyberArk) – May 2026 Security Highlights
27 May 2026 — CyberArk disclosed a critical issue where incomplete IIS configuration guidance for Central Credential Provider deployments in z/OS environments could lead to weak authentication scenarios.
20 May 2026 — A high-severity vulnerability affecting HTML5 Gateway deployments could allow denial-of-service attacks against PAM session infrastructure.
13 May 2026 — CyberArk reported issues across Secrets Manager, CCP, z/OS Credential Provider, and Credential Provider installations, including token forgery risks, identity verification bypass, DoS conditions, and sensitive information exposure.
13 May 2026 — CyberArk addressed vulnerabilities affecting PSM, PSMP, Vault/Infra, and Vendor PAM connectors, including session isolation bypasses, credential exposure risks, command injection paths, and Vault denial-of-service scenarios.
13 May 2026 — CyberArk released fixes for a high-severity Endpoint Privilege Manager vulnerability affecting Windows, macOS, and Linux agents prior to version 26.5.
🔐 Delinea - StrongDM – May 2026 Highlights
16 May 2026 — StrongDM expanded diagnostic visibility by adding operating system HTTP proxy configuration details to the sdm doctor report.
13 May 2026 — Added support for TLS-secured xRDP connections, extending secure remote desktop capabilities for Linux-based environments and OCI virtual machines.
6 May 2026 — Fixed an issue where sdm rdp replay --download failed with a “session not found” error on systems using positive UTC offsets.
4 May 2026 — Introduced sdm audit requestable-entitlements, enabling point-in-time entitlement visibility across users, roles, and resources.
1 May 2026 — Resolved a memory leak affecting long-running Kubernetes driver operations, including shell sessions, command execution, file transfers, and port forwarding.
🔐 SailPoint Identity Security Cloud – May 2026 Highlights
22 May 2026 — SailPoint introduced a Claude Enterprise connector, enabling aggregation of users, groups, roles, and managed agents to support governance of AI-driven enterprise environments.
15–22 May 2026 — SailPoint expanded Quick Compliance support across multiple SaaS platforms, making it easier to configure read-only account and entitlement aggregation.
15 May 2026 — Administrators and Compliance Managers can now configure automatic revocation campaigns for SharePoint Online and OneDrive records.
8 May 2026 — Workflow history and lifecycle events are now available in Search, with new Manager and Executions views improving operational visibility.
1 May 2026 — Harbour Pilot now supports natural language access requests on behalf of another user, helping streamline onboarding and role-change workflows.
🔐 Idira (CyberArk) – May 2026 Security Highlights
27 May 2026 — CyberArk disclosed a critical issue where incomplete IIS configuration guidance for Central Credential Provider deployments in z/OS environments could lead to weak authentication scenarios.
20 May 2026 — A high-severity vulnerability affecting HTML5 Gateway deployments could allow denial-of-service attacks against PAM session infrastructure.
13 May 2026 — CyberArk reported issues across Secrets Manager, CCP, z/OS Credential Provider, and Credential Provider installations, including token forgery risks, identity verification bypass, DoS conditions, and sensitive information exposure.
13 May 2026 — CyberArk addressed vulnerabilities affecting PSM, PSMP, Vault/Infra, and Vendor PAM connectors, including session isolation bypasses, credential exposure risks, command injection paths, and Vault denial-of-service scenarios.
13 May 2026 — CyberArk released fixes for a high-severity Endpoint Privilege Manager vulnerability affecting Windows, macOS, and Linux agents prior to version 26.5.
🔐 Delinea - StrongDM – May 2026 Highlights
16 May 2026 — StrongDM expanded diagnostic visibility by adding operating system HTTP proxy configuration details to the sdm doctor report.
13 May 2026 — Added support for TLS-secured xRDP connections, extending secure remote desktop capabilities for Linux-based environments and OCI virtual machines.
6 May 2026 — Fixed an issue where sdm rdp replay --download failed with a “session not found” error on systems using positive UTC offsets.
4 May 2026 — Introduced sdm audit requestable-entitlements, enabling point-in-time entitlement visibility across users, roles, and resources.
1 May 2026 — Resolved a memory leak affecting long-running Kubernetes driver operations, including shell sessions, command execution, file transfers, and port forwarding.
https://www.thirdwaveidentity.com
https://www.thirdwaveidentity.com