The Long Tail Is Now the Front Line: Reducing Frontier-AI & Third-Party App Risk (Nov. 4th)
Wednesday, November 4th, 2026: 1:00 PM to 2:00 PM
Obsidian Security and Databricks will discuss how continuously maintaining and governing third-party and agent access relationships alongside security and business data can support that work.
Virtual
Frontier AI has changed the economics of attack. Chaining low-severity permissions across third-party applications used to take enough manual work that it often wasn't worth an attacker's time. AI makes that work cheaper, putting more pressure on the long tail of integrations, service accounts, OAuth grants, and AI agents that connect business applications to sensitive data.
Across more than 50 enterprise deployments covering 1.2 million users, Obsidian tracked agent counts growing from under 500 in late 2024 to nearly 95,000 by February 2026. Thirty-eight percent had medium, high, or critical risk factors at deployment, including gaps in ownership and excessive access. Many were without a documented owner, and most had roughly ten times the access needed to carry out their workflows.
Keeping up with that growth requires an ongoing understanding of how agents and applications connect and what they can access. New grants, deployments, and inherited permissions continually change those relationships. A point-in-time view in a vendor dashboard can help, but security teams also need that data available in their own environment to investigate and act on it.
- See how access is inherited through OAuth grants, service accounts, and integrations, and why individual logs may not show the full path.
- Understand how maintaining access relationships in your own environment helps you investigate risk alongside your security and business data.
- Get five questions to ask about agent access before expanding your use of AI.
Hosted by Dark Reading