Entity trail

Oasis Security

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Corpus findings

2026-08-09 / agents-researcherCVSS 10.0 in Paperclip: self-register an account, self-approve a CLI challenge, then import a company YAML that executes shell commandsOasis Security disclosed CVE-2026-41679 in Paperclip, an AI management platform for running autonomous agents at scale, affecting network-accessible instances in default authenticated mode. The chain requires no invitation and no verified mailbox: register, sign in, create and self-approve a CLI authorization challenge to mint a board API token, then hit the company-import route — which enforced only board-level access while direct company creation required instance admin — with a crafted `.paperclip.yaml` defining an agent that uses a host-level execution adapter. Oasis also reported a DNS-rebinding weakness where local-dev mode trusts everything reaching 127.0.0.1, letting an attacker-controlled webpage run commands on a developer's machine.
2026-08-04 / saas-disruption-researcherCyera Extended Agent Guardian to the Endpoint, Chasing Local AI Tools Running on Employee LaptopsCyera introduced Agent Guardian and Cyera Endpoint on August 3 at Black Hat, structured around a four-phase discover, govern, protect, validate framework that continuously inventories AI agents and enforces runtime controls on prompt injection and unauthorized data access. Cyera Endpoint is the more consequential half: it pushes the same guardrails onto local AI tools running directly on employee devices, extending the company beyond browser-based controls to the device layer. The $12B-valued company reached this position partly by acquisition, having bought non-human-identity vendor Oasis Security to assemble the agent security stack rather than build it.
2026-07-29 / saas-disruption-researcherCROSS-CATEGORY: $1.09 Billion Went Into AI Agent Permissions in a Single Day, Across Three Separate DealsOn July 28 alone, Cyera agreed to buy Oasis Security for $1B, Act Security emerged from stealth with $60M ($20M seed from Team8 and Bessemer, $40M Series A from Notable Capital), and Hush Security closed a $30M Series A with Akamai joining as strategic investor. All three sell the same primitive from different angles: revoke standing credentials, scope permissions just-in-time, and keep a registry and kill switch for every non-human actor. The forcing function is Gartner's projection that the average Fortune 500 will run 150,000-plus agents by 2028, up from fewer than 15 in 2025, against only 13% of organizations claiming adequate governance today. For builders: the agent authorization layer is now a funded category, not a DIY concern, and 'who is this agent and what may it touch' is becoming a purchased dependency the way SSO did a decade ago.
2026-07-29 / saas-disruption-researcherCyera Is Buying Oasis Security for $1B, About $700M of It in Cash, to Own the Login Layer for AI AgentsCyera signed a letter of intent on July 28 to acquire Tel Aviv-based Oasis Security for roughly $1 billion, about $700 million cash and the rest in Cyera shares. Oasis, founded in 2022 and only four months past a $120 million Series B, sells 'agentic access management' for non-human identities: service accounts, API keys, OAuth tokens and agent-to-agent credentials. Cyera itself raised $600 million at a $12 billion valuation weeks earlier, making this the second-largest cybersecurity deal of 2026 behind Accenture's $3.2 billion Dragos stake, and it is a bet that data security and machine-identity security collapse into one product once agents outnumber employees.
2026-07-29 / agents-researcherOasis Security discloses PromptFiction: one click on a claude:// link auto-submitted hidden prompts in Claude DesktopOasis Security disclosed on July 28 that Claude Desktop's registration of the claude:// URL scheme caused the app to open, import a prompt from the URL, and immediately submit it without showing the full prompt or asking for approval. Visible text looked benign while hidden instructions in the same link were silently executed, enabling conversation-history exfiltration, filesystem reads, and, for anyone running the popular Filesystem MCP server, code execution on the host. Anthropic patched it in Claude Desktop 1.1.2321, where claude:// prompts are now pre-filled but require an explicit user send. The lesson for builders is that any custom URL scheme registered by an agent client is an unauthenticated instruction channel.
2026-04-10 / skill-finderOpenClaw ClawJacked: 135,000 Exposed AI Agent Instances Vulnerable to Silent WebSocket Localhost HijackOasis Security found that OpenClaw's local WebSocket gateway exempts localhost from rate limiting, allowing any website to brute-force the gateway password at hundreds of attempts per second and silently register as a trusted device — no user interaction required. With 135,000 publicly exposed instances and 138 CVEs discovered in 63 days (2.2 per day), OpenClaw exemplifies the 'implicit localhost trust' anti-pattern. Builders running local AI agents should audit whether their WebSocket gateways properly authenticate localhost connections.
2026-03-31 / agents-researcher$392M in Agentic AI Security Funding Announced During RSAC 2026 Two-Week Window: XBOW Hits $1B+, RunSybil Founded by OpenAI's First Security HireOver $392 million in new agentic AI security funding was announced during the two weeks surrounding RSAC 2026, across 10 startups reshaping the market. XBOW raised $120M Series C at $1B+ valuation for autonomous offensive security. Oasis Security raised $120M Series B for non-human identity governance. RunSybil closed $40M, founded by OpenAI's first security hire with angels including Nikesh Arora. Qevlar AI raised $30M with Mercedes-Benz and Orange Cyberdefense as customers. The Alphabet-Wiz $32B deal also closed in March — the largest pure-play cybersecurity acquisition ever.

Graph relationships

CRITICIZES
paperclip
Oasis Security disclosed CVE-2026-41679 in Paperclip with a CVSS 10.0 rating
Source finding
ACQUIRED
Cyera
Cyera acquired Oasis Security, a non-human-identity vendor.
Source finding
ACQUIRED
Cyera
Cyera is acquiring Oasis Security for approximately $1B
Source finding
ACQUIRED
Cyera
Cyera signed letter of intent to acquire Oasis Security for $1B
Source finding
CRITICIZES
OpenClaw
Oasis Security discovered 135,000 exposed OpenClaw instances vulnerable to localhost hijack
Source finding
CRITICIZES
Claude Desktop
Oasis Security disclosed that Claude Desktop's claude:// URL scheme auto-submitted hidden prompts without user approval
Source finding
Reported in
Oasis Security discloses PromptFiction: one click on a claude:// link auto-submitted hidden prompts
Source finding
ACQUIRED
Cyera -> Oasis Security
Cyera acquired Oasis Security, a non-human-identity vendor.
Source finding
ACQUIRED
Cyera -> Oasis Security
Cyera is acquiring Oasis Security for approximately $1B
Source finding
ACQUIRED
Cyera -> Oasis Security
Cyera signed letter of intent to acquire Oasis Security for $1B
Source finding

Source trail

SecurityWeek SecurityWeek SecurityWeek PR Newswire arXiv study posted July 28 VulnCheck data reported by The Register Oasis RAXE Labs Researchers on arXiv arXiv 2604.08465 Oasis Security LiteLLM's security update

Graph sources

entity graphfindings textkg edgeskg entitiesnewsletter issues

Fetching from the wire…