Netwrix @Netwrix

Your customers think data security is a compliance problem. The market just moved to governance. That shift changes everything about how they spend money. Assessments. Implementation. Managed services. Renewal expansion. If you're not helping them make that shift, your margin stays flat and your renewals get cheaper. Oct 21: See where the revenue actually is. Register today event.on24.com/wcc/r/5498367/… 10:30 AM IST | 1 PM SGT | 2 PM KST | 4 PM AEST #DataSecurity #ChannelMarketing #PartnerGrowth #Resellers

We're packing our Cybersecurity Month activities into one innovation-fueled week. October 19 to 23, five days of demos, interviews, and livestreams on identity and data security and AI: Monday: Grady Summers and Jeff Warren on why agentic AI matters Tuesday: Jeff Warren demos 1Secure agentic AI security Wednesday: Darryl Baker demos AIHound, plus the CTF kickoff and PingCastle updates Thursday: Shadow AI data loss prevention, and a live expert panel on identity security with Microsoft MVPs Phillip Wylie, Christina Morillo, and Spencer Alessi Friday: Dan Piazza on how AI tokens can turn anyone into an attacker, plus a live Anatomy of a Hack with Tina Shakour There’s also a capture the flag with five AI-based challenges, solved by interacting with an AI helpdesk assistant. The winner gets a free ticket to Black Hat 2027 in Las Vegas. Save the date and see the full schedule: netwrix.com/en/lp/innovati… #Netwrix #InnovationWeek #CybersecurityMonth

It's more difficult than ever to keep your data safe. That's why we built 1Secure. Here's our Chief Product Officer, Jeff Warren, on how 1Secure™ can help you stay ahead of attacks. #Netwrix1Secure #IdentitySecurity #DataSecurity #Netwrix

Auditors don’t ask if your controls exist. They ask if you can prove it, on the spot. Dirk Schrader, VP of Security Research at Netwrix, explains why public-sector teams should get evidence-ready before the next audit. Then join our live webinar with a Netwrix Auditor demo: From CJIS to FERPA: Audit Evidence for Compliance Tuesday, October 13, 2026 | 1:00 p.m. EDT Save your seat: event.on24.com/wcc/r/5500663/… #CJIS #FERPA #Netwrix

Identity-first security is easy to say and hard to run. That was the thread through Tyler Reese’s fireside chat at OptivCon Kansas City. Tyler, our VP of Product Management, joined the session on what recent incidents and implementations are teaching security teams, and what identity-first security looks like in practice. Thank you to @Optiv and everyone who stopped by our booth on Wednesday, Oct. 7, 2026. If you missed us in Kansas City, reach out to our team. #Netwrix #OptivCon #IdentitySecurity #DataSecurity

keyboard_arrow_left Previous keyboard_arrow_right Next

An attacker with domain admin credentials doesn’t look like an attacker. That’s the problem. Compromised identity is now the leading route to unauthorized access, ahead of misconfigured permissions, per Netwrix's 2026 Data and Identity Security Report. We tested that by paying real attackers to breach a moderately hardened Active Directory. Every attack from standard users and admins was caught. Once an attacker held valid domain admin credentials, every attack got through, because the requests looked exactly like a real admin's. PAM, IGA, and ITDR each cover a different moment in that attack. Bolted into one console, they're still three separate jobs. Read the full post: netwrix.com/en/resources/b… #PAM #IGA #ITDR #Netwrix

Innovate Summit Scottsdale wrapped up this week, and Booth #105 at the JW Marriott Scottsdale Camelback Inn gave us three days of them. Security leaders stopped by to talk about reducing cyber risk and protecting critical data. Thank you to the Innovate organizers for a well-run event, and to everyone who stopped by. Thanks to the team on the ground: Ryan Goss, Michael Henriks, Collin Bass 🐟, Kent Tuominen, and Tina Shakour, CISSP. If we missed each other in Scottsdale, send us a message. We’ll pick up where the conversation left off. #Innovate2026 #Cybersecurity #Netwrix #InfoSec

keyboard_arrow_left Previous keyboard_arrow_right Next

Day one at Les Assises de la Cybersécurité 2026, and we've had good conversations already with CISOs, CIOs, and security leaders from across banking, government, defence, and energy. If you're here at the Assises, come find the Netwrix team. We'd love to talk through what's on your roadmap: identity and access management, governance, threat management, data security, or getting ahead of AI-driven risk. More to come as the week continues. See you on the floor. Monaco | October 7–10, 2026 Book a meeting with us: lesassisesdelacybersecurite.com/fr-FR/mon-espa…

keyboard_arrow_left Previous keyboard_arrow_right Next

Pull up a privileged account used in a session yesterday. Is it still there? Does it still hold the same group memberships? If yes, you have password rotation. You don't have Zero Standing Privilege. Rotation stops a credential from being reused. It doesn't make the account disappear, and an attacker who finds it doesn't need yesterday's password; they just need the account to still exist and still hold privilege. Per Netwrix's 2026 Data and Identity Security Report, 76% of organizations can't immediately revoke standing access when it's no longer needed, and 64% have overprovisioned access sitting on critical data right now. Zero Standing Privilege asks a different question: why should the account exist when nobody's using it? With ephemeral accounts, access is created for a task and [disabled/deleted — confirm] the moment it ends. Read the full blog: netwrix.com/en/resources/b… #ZeroStandingPrivilege #PasswordRotation #Netwrix

System prompt files, model configs, and safety filter rulesets are just files sitting on a server. They're every bit as exposed as any other config, with more consequential outcomes if tampered with. Join Dan Piazza, Product Management, at Netwrix on October 15 to see how Netwrix Change Tracker brings file integrity monitoring, CIS-aligned hardening, and closed-loop change control to the configuration layer underneath your AI deployment, so you can tell a scheduled update from an unauthorized one. Thursday, October 15 | 1:00 PM ET Reserve your spot: event.on24.com/wcc/r/5490402/…

Reselling software is getting harder. Reselling proof is not. For your SMB and mid-market customers, identity security, data security, compliance, and AI readiness have collapsed into a single conversation, and most can't prove who has access to what, what changed, or whether their controls work. Join Ed Baker, Ryan Oistacher, and Eleonora Liapina for a sales-focused session that's deliberately not a product briefing. It's the business case: where the revenue is, the fastest route to a first opportunity, and three ways to sell one platform. Wednesday, October 14 | 2:30 PM CEST Reserve your spot: event.on24.com/wcc/r/5495104/…

Two days. One clear signal: AI adoption is outpacing identity hygiene, and most teams are just starting to catch up. That's a wrap on Cyber Security World Asia 2026 at Sands Expo, Singapore. Thank you to everyone who stopped by booth. Missed us? Visit netwrix.com to learn more #CSWAsia2026 #CyberSecurityWorldAsia #IdentitySecurity

keyboard_arrow_left Previous keyboard_arrow_right Next

Healthcare AI agents inherit whatever access already accumulated in Active Directory, not the access anyone meant to give them. That gap shows up in the numbers: 79% of healthcare organizations say their non-human identities, including AI agents, aren't fully governed. Healthcare ranks lowest of 16 industries in confidence that its Active Directory is free of privilege escalation risk, with 86% lacking full confidence. Among those that experienced an incident, 33% put the cost above $250,000. Darryl Baker, Senior Staff Security Researcher at Netwrix, explains what healthcare organizations need to understand about existing access before adding more AI agents and non-human identities. Read the full press release: netwrix.com/en/resources/n… #DataSecurity #IdentitySecurity #ActiveDirectory #Netwrix

A written AI policy doesn't stop shadow AI. A technical control does. Only 20% of organizations say they fully monitor or govern employee use of shadow AI, according to Netwrix's 2026 Data and Identity Security Report. The rest are relying on policy while employees download AI writing assistants, browser extensions, and executables IT never reviewed. Dirk Schrader, VP of Security Research at Netwrix, explains why AppLocker can't keep pace with AI tool sprawl, and how file-owner-based allowlisting flips the question from "what's on the list" to "who put this file here." Read the full blog: netwrix.com/en/resources/b… #Netwrix #AIPolicy #ShadowAI #DataSecurity #IdentitySecurity

Thanks to the GrrCon organizers for putting together a solid few days of straight talk on identity, data security, and where AI is changing the risk conversation. Thanks also to Guidepoint Security and SynerComm for hosting the Happy Hours, good spaces for the kind of conversations that don't happen on a show floor. Thanks to our team on the ground this week: Joanna L., Michael J. Annechino, and Jeffrey Forsyth. #Netwrix #GrrCon

keyboard_arrow_left Previous keyboard_arrow_right Next

An attacker mining SharePoint for sensitive files and Microsoft 365 Copilot answering an employee's question trigger the exact same detection signature. Same behavior, same telemetry, no way to tell them apart. James Anderson, Technical Product Manager at Netwrix, breaks down why the MITRE ATT&CK technique for adversaries mining SharePoint now describes what Copilot does dozens of times a day. He also gets into why most security teams already quietly stopped detecting for it, without deciding to. Read the full blog: netwrix.com/en/resources/b… #Netwrix #MitreAttack #InsiderThreatDetection

Regulators aren't asking if you're ready for NIS2 anymore. They want proof. The compliance deadline passed in October 2024. If your organization operates in energy, transport, finance, health, digital infrastructure, or any other critical sector the directive covers, that shift already applies to you. Article 21 asks you to prove who has access, what they did with it, and whether you'd notice if something went wrong. Daniel Bago, Product Marketing Manager at Netwrix, walks through nine Netwrix Auditor reports that map your access surface and track behavior once permissions are granted. The same reports also prove what changed, following the same logic an auditor, or an attacker, would use. Read the full blog 👉🏼 netwrix.com/en/resources/b… #Netwrix #NIS2 #NetwrixAuditor #9NetwrixAuditorReport #NIS2Compliance

Today's the last day of JNUC 2026 in Kansas City, and our team has spent the week connecting with Apple admins, IT leaders, and security professionals across the community. If you're at JNUC today, come find us at the Netwrix booth before we wrap up. We're showing how we help organizations protect critical data, secure identities, and get greater visibility across their environments, including Data Loss Prevention and Device Control built for macOS. Come say hello, grab some swag, and talk security before the show closes. #Netwrix #JNUC #DataSecurity #IdentitySecurity

keyboard_arrow_left Previous keyboard_arrow_right Next

DLL hijacking isn't new. The way AI plugins are reintroducing it is. When a team bolts an AI plugin onto a legacy app that loads its DLLs by name instead of by full path, they add new folders Windows will search when it looks for that DLL. That's a new opportunity for an attacker to plant a malicious file that inherits the app's privileges. No new exploit required. Just a familiar weakness in a newer place. Dirk Schrader, VP of Security Research at Netwrix, explains how it works, how to detect it, and what stops it at the endpoint. Read the full blog: netwrix.com/en/resources/b… #DLLHijacking #DataSecurity #IdentitySecurity #Netwrix

Two days of hands-on cybersecurity challenges and honest conversations about the threats organizations are actually facing, that's what South Florida ISSA's Conference & Hack the Flag delivered this year. Representing Netwrix, Soufia Lakhdar and Alex McCoy spent the event connecting with cybersecurity practitioners, students, and ethical hackers on identity security, data security, and the gaps attackers continue to exploit. Thank you to everyone who stopped by the Netwrix booth, joined the conversation, and took part in our booth bingo giveaway. We had a great time. #Netwrix #IdentitySecurity #DataSecurity