Silverfort

My 16-year-old texted me on May 7th. He sent a screenshot from his high school's Canvas login page in Wesley Chapel, FL. It had been replaced by a ShinyHunters ransom note. "the Canvas for school got hacked. with all my information." He wasn't wrong. ShinyHunters breached Instructure twice in eight months. The entry point wasn't a privileged admin account or a zero-day. It was Free-For-Teacher accounts — a free, externally-facing identity tier at the edge of the platform. 3.65 terabytes. 275 million users. 8,809 institutions. The largest educational data breach on record. Instructure's CISO declared it contained May 2nd. ShinyHunters were back May 7th. The ransom was paid. This is the identity problem nobody wants to talk about: We spend millions governing privileged accounts. But free tiers, guest accounts, service accounts, API tokens — low-privilege external identities — are almost never in scope for identity reviews. And that's exactly where attackers are going. USF, Hillsborough, Pinellas, Pasco — this didn't happen somewhere else. It happened here, in my backyard, at my kids school. This is precisely what we work on every day at Silverfort — stopping lateral movement before it becomes a breach, preventing privilege escalation from low-privilege accounts, and protecting service accounts that traditional vaults can't reach. The perimeter didn't fail here. Identity governance did. If you're not auditing your external-facing low-privilege identities, this breach is the case study you forward to your CISO or bring to your next 1:1. #IdentitySecurity #Silverfort #IAM #CyberSecurity #ZeroTrust #ShinyHunters #PrivilegeEscalation #NonHumanIdentity

🚨 Another #breach . Another lesson we keep ignoring. The #Canvas #incident wasn’t just a software problem. It was an #identity problem. Attackers today don’t #hack systems. They authenticate. - Trusted apps - #OAuth permissions - #Serviceaccounts - Non-human identities ( #NHI ) These have quietly become the largest unmanaged attack surface in education — and most organizations don’t even have visibility into them. After reviewing the incident, I put together an Identity Security Action Plan for Education leaders. #Read it here: https://lnkd.in/gMCVcFsw One #question for security leaders: Do you know every identity that currently has access to your critical data? **Drop a comment: What worries you more today — ransomware or identity compromise? Silverfort The Identity Underground Microsoft Most Valuable Professional Microsoft Alumni Network Fabrix Security (Acquired by Silverfort) Aimee S. Roy Akerman Stuart Wilson Suraj Singh Chris Russell Sim Yap #university Deakin University RMIT University La Trobe University School of Computing, Engineering and Mathematical Sciences, La Trobe University University of Melbourne Swinburne University of Technology Victoria University #IdentitySecurity #CyberSecurity #ZeroTrust #HigherEducation #CISO #SecurityLeadership #CyberRisk

99% of organizations have at least one privileged Microsoft service principal. More than half are already using agent identities. That’s why this finding matters. Our research team uncovered that the new Agent ID Administrator role in Microsoft’s Agent Identity Platform could take over arbitrary service principals, even ones completely unrelated to AI agents. That kind of scope gap is not just technical. It creates real identity security risk. In her latest blog, security researcher @Noa Ariel breaks it down: 🤖 How Entra Agent ID works and how Microsoft is redefining this identity type 🤖 The behavior that allowed the Agent ID Administrator role to assign itself ownership over unrelated service principals 🤖 What this means for organizations adopting AI agents 🤖 Microsoft’s fix and what you should do to enforce strict identity scoping If you are working with Entra, service principals, or AI agents, this is worth your time. Silverfort https://lnkd.in/gUNd8Qcm

Another incredible week in #Mumbai spent on the ground with customers, prospects, and partners who are tackling identity security challenges head on. I had the privilege of speaking at an event hosted by Techsa Services Private Limited , where we explored what it really means to secure identity from #AD to #AI . One thing is clear: organisations are no longer just aware of identity risks - they deeply understand them. And as #AI rapidly reshapes the threat landscape, that awareness is evolving into urgency and action. Identity is no longer an IT problem, it’s a business-critical priority. Silverfort as we continue to lead and redefine the #identitysecurity landscape. Abhinav Gupta Mrunal Pathak 🇮🇳 Srihaas T. Suraj Singh Hemant Gupta Namrata Sharma Alyssa Choi Abbas Kudrati

Thrilled to share that Silverfort and SentinelOne have formed a strategic alliance, bringing together our runtime identity protection with SentinelOne's AI-powered Singularity Platform. We're giving joint customers a single, real-time control plane to detect and stop identity-based attacks across humans, machines, and AI agents. I'm really excited about what we're building together. Ben Goodman 🇺🇦 Frank Gasparovic thank you for you great work on building this alliance, the sky is the limit!

Identity gets skipped in every AI security conversation, until it becomes the attack path. Three categories of AI security exist: model and prompt security, data security, and identity and access. Our research team found that the Agent ID Administrator role in Microsoft Entra ID allowed full takeover of arbitrary service principals, including privileged ones with Global Administrator rights. Microsoft has fixed it but the larger lesson is still standing: AI agents are non-human identities. They authenticate, accumulate permissions, and access sensitive resources, exactly what service accounts did before anyone took those seriously. #AISecurity #IdentitySecurity #Silverfort

Silverfort 🤝 SentinelOne Attackers don't "hack in" anymore. They log in. And once they're holding valid credentials, you've got seconds, not hours, to do something about it. That's why we're teaming up with SentinelOne . Silverfort watches what identities are doing in real time. SentinelOne watches what endpoints are doing. Put them together and you get one brain making faster, smarter decisions about who gets to do what, right when it matters. The result: less lateral movement, less privilege escalation, fewer bad days for your SOC. Cloud, on-prem, whatever. One platform, one story. Ron Rasin, our CSO, says it better than I can: "We're helping organizations stop identity-driven attacks before damage occurs, and preparing them for what comes next in AI-powered environments." Identity security at runtime. Finally. Learn more about how we're going further together to deliver identity-first resilience: https://lnkd.in/gAphkTH2

Here we go ! #silverfort #sentinelone

Ready to attend #MicrosoftAiTour #Sydney tomorrow? I will be proctoring workshop on ‘Prototype agents with the AI toolkit and Model Context Protocol”, come and say hello if you are around. Microsoft Most Valuable Professional Microsoft Security Microsoft Alumni Network Silverfort #MCP #AGENTICAI #Copilot