CyberArk's new AI tools boost identity security efficiency

At its annual conference, CyberArk IMPACT 24, CyberArk unveiled two significant advancements aimed at bolstering security teams' efficiency and effectiveness in combating identity-related threats. This comes at a critical time, as recent research from CyberArk indicates that 99% of Australian organisations experienced two or more identity-related breaches last year.

The first major announcement is the launch of CyberArk CORA AI, a suite of AI-powered capabilities integrated across CyberArk's identity security platform. CORA AI will convert vast quantities of identity data into actionable insights and facilitate multi-step actions using natural language. This will empower organisations to enhance their security posture by implementing appropriate privilege controls for both human and machine identities. One of the primary benefits of CORA AI is its ability to reduce the time required to sift through identity data for anomaly analysis and threat detection, bringing timeframes down from hours to minutes.

Additionally, CyberArk revealed new enhancements to its Identity Security Platform, also driven by AI and Identity Threat Detection and Response (ITDR). The updated functionality allows organisations to apply precise privilege controls to each identity type while ensuring a seamless and consistent user experience for both administrators and end users. Catering to diverse identity needs, including those of the workforce, IT, developers, and machines, these improvements aim to make security teams more effective without disrupting workflows.

Matt Cohen, CEO of CyberArk, remarked on the transformative potential of AI in today's digital landscape. "AI is a double-edged sword, used by bad actors to bypass security whilst being adopted by forward-thinking organisations for its powerful defence capabilities. With CORA AI, CyberArk offers advanced detection and response capabilities combined with the ease-of-use made possible by Generative AI," Cohen said. "By integrating AI across our identity security platform, we enable our customers to leverage its full power for faster, better security outcomes."

The new AI-powered features of CyberArk CORA AI are set to further bolster the platform’s capabilities in several key areas. These include:

• Session Analysis & Detection Insights in Minutes: CORA AI will quickly analyse user activities and detect and highlight critical information, significantly reducing the necessity of reviewing hours of recorded web and SSH sessions.
• Secrets Anomaly Detection for Machine Identities: Using CyberArk Secrets Hub, CORA AI will alert users to unusual or non-compliant access to secrets in the AWS Secrets Manager, expediting investigation and response times.
• Identity Security Assistant for Faster, Easier Action: CORA AI will execute natural language instructions, akin to conversing with a colleague, thereby quickly executing tasks across the CyberArk Identity Security Platform.
• Automated Policy Creation: Privileged access management tools will automatically process data collected by CyberArk Endpoint Privilege Manager, recommending appropriate privilege elevations and application controls for immediate risk reduction.
• Real-time Assistance with Documents & Chat Bot: The integrated chatbot will provide real-time explanations and guidance, eliminating the need to navigate through extensive documentation.

CORA AI will also detect anomalies in end-user behaviour, automate endpoint policy creation, update user risk scores, and apply adaptive multi-factor authentication logic, among other automated response actions.