SAP Issues Critical Security Patches and Earns Supply Chain Leadership Recognition

Aembit announced support for Okta's Cross App Access protocol to manage enterprise AI agent access, and revealed that Helen Riley, an executive at Alphabet's X, is joining its board of directors. The XAA integration is intended to streamline authorization and oversight for automated agent workflows used by corporate customers. The XAA integration and Helen Riley's board role are only part of the broader story around Okta's identity platform, and Simply Wall St flagged one warning sign for Okta. Okta positions itself as an identity partner for enterprises that want a single control point governing how humans and software agents reach critical systems, so moves around Cross App Access plug directly into how the firm aims to sit between corporate users, AI tools, and cloud infrastructure. The article points toward a $122 fair value for Okta.

Telos reported on Monday a $13.7M contract award from the U.S. Department of Health and Human Services to modernize cyber governance, risk, and compliance and Authority to Operate processes across the HHS enterprise. Under the 18-month task order, Telos will deploy its FedRAMP Class D (High)-authorized Xacta suite, including Xacta 360, Xacta.io, and Xacta.ai, for the HHS Office of the Chief Information Officer and Office of Information Security. The award also covers cybersecurity, enterprise integration, training, and data migration services to support implementation.

Okta emerged from its Oktane 2026 conference with a stronger AI narrative and a wave of analyst price-target increases, though the debate now centers on how quickly that opportunity can become material enough to justify the stock's valuation. BMO Capital said the event reinforced its view that identity's total addressable market can expand, Roth Capital highlighted that early Okta for AI Agents deals are generating a 50%-60% uplift in deal values, and RBC Capital said the product is driving broader platform pipeline. On the Q2 earnings call, management said AI-agent products were already generating dozens of deals, including several million-dollar-plus contracts, but CFO Brett Tighe emphasized the contribution remains very small relative to Okta's roughly $3 billion revenue base. Q2 revenue increased 11%, subscription revenue rose 12%, and cRPO accelerated 200 basis points to 14% growth, driven primarily by large enterprises, an expanding product portfolio, and stronger execution rather than AI revenue, with new products representing about 30% of bookings and Okta Identity Governance the largest contributor. Stephens raised its target to $240, Jefferies expects a more pronounced AI monetization cycle in 2027, and DA Davidson cited positive customer and channel conversations, while BofA said Oktane did not alter its core investment thesis because the opportunity remains early; management said AI should remain immaterial to FY2027, with meaningful contribution potentially emerging in FY2028 and beyond. The stock traded at roughly 54.4 times forward earnings as of September 24, while 58 hedge funds held bullish positions in Q2, up from 49, and short interest rose to 8.21 million shares as of September 15, or 5.49% of the float, versus 6.45 million shares the prior month.

ServiceNow introduced new AI governance and workflow security tools called AI Control Tower, Context Engine, and Shift Zero. The products are aimed at helping enterprises manage AI agents with integrated identity, context, and cybersecurity controls. ServiceNow is targeting secure automation, access management, and compliance needs as companies expand AI-driven workflows across their operations. ServiceNow runs cloud software that helps large organizations manage digital workflows across departments, and these new AI governance tools plug directly into systems that already handle IT tickets, HR requests, and operational approvals for customers across North America and other global regions.

The Ministry of Finance has joined hands with the Ministry of Digital Economy and Society to prepare four national central systems to link data on suspicious transactions between agencies, so that all sectors see the same set of risk data, and to speed up the tracing and freezing of money trails before funds are withdrawn, converted into digital assets or gold, or transferred out of the country. Dr. Ekniti Nitithanprapas, Deputy Prime Minister and Minister of Finance, in his capacity as chairman of the subcommittee on linking financial data to enhance the monitoring and investigation of suspicious financial transactions, disclosed together with Mr. Chaichanok Chidchob, Minister of Digital Economy and Society, that the subcommittee approved guidelines to upgrade the prevention and suppression of suspicious transactions in two areas: raising KYC, CDD and EDD standards to be on par with the world's leading financial centres, and drawing up a National Anti-Fraud Master Plan, whose core structure comprises four national central systems. These are the Data Sharing with Consent system, which exchanges risk data under consent; the Anonymous Financial Data Bureau, a centre for anonymous financial transaction data; the Case Management system, a national incident-reporting management system based on the principle of report once, one route; and the Financial Investigation and Account Action system for linking data and freezing money trails. The subcommittee has assigned the Permanent Secretary of the Ministry of Finance, together with relevant agencies, to design the details of the data structure, operating systems, connection guidelines, responsible parties, as well as the rules and data standards for all four systems, to be completed within 30 days before being submitted to the subcommittee for further consideration.

Salesforce announced its Trusted Enterprise AI Harness on September 10, 2026, formalizing the agent governance stack into a single platform. The Harness comprises six core capabilities: Trusted Context, Trusted Agency, Trusted Action, Trusted Governance, Trusted Security, and Trusted Models, anchored by a new AI Control Plane that lets organizations discover and register agents, establish identity and policy, manage lifecycles, evaluate performance, and control costs. The control plane is designed to manage both Salesforce and third-party AI agents, following the recent Claudeforce initiative that made Anthropic's Claude the default reasoning engine across the platform. Rohan Kumar, Salesforce's President and Chief Platform and Engineering Officer, said the Agentic Enterprise won't be defined by which model a company chooses but by the trusted, proprietary context it brings to that intelligence. The Harness is not scheduled for general availability until early fiscal year 2028, which begins in February 2027, and pricing details have not been disclosed.