Okta

2 items

New York Times 2026-05-14-1

Google Says Criminal Hackers Used A.I. to Find a Major Software Flaw

Google's criminal AI zero-day confirms the new attack topology: AI compressed bug discovery to near-zero cost, but the attacker still needed credentials and the patch cycle still ran in days. The asymmetric trade sits in IAM hardening and patch-velocity infrastructure. The AI-security pure-plays are already priced for the headline; the credential layer is what actually moved.

Bloomberg 2026-05-09-2

AI Is Making Digital Fraud Easier, Faster and Harder to Stop

Breach notifications to victims fell 79% last year while breaches hit a record high — the disclosure regime didn't get repealed, it decayed through underuse. Companies underdisclose, states underenforce, and the cost lands on consumers and small banks while AI defense vendors capture the rents. The structural fix — continuous identity attestation at the rails layer — is the same control plane the agentic enterprise stack needs, which means two demand vectors pointing at the same consolidation.