# Ory News | August 2026 Product & Community Updates

Canonical: https://brew.new/browse/templates/email/pt1_k97p9mkbjx6fyhycjexh4qp6wx8e4773

Brand: ory.sh
Category: newsletter

![Preview of Ory News | August 2026 Product & Community Updates](https://cdn.brew.new/email-preview-d259f48a81b4c9a3-tracking_r57x8kv631xdpgqq1g6v87kv6n8dt1vk-1789012853378.png)

## Email content

View in browser

Ory logo

Ory Update — August 2026

Welcome to the August update. We have multiple items to share with you. Have an idea for next month? Email damon.tepe@ory.com.

Device Binding Now Available!

August 2026 Newsletter Hero Image

Device Binding also known as Device Authentication is now available!

Tie user accounts to a private key held in the device's own hardware, attested by Apple or Google. Unlike a password of SMS code, it can't be phished, copied, or used from anywhere else. Available now on Ory Network Enterprise and Kratos OEL. Read the blog.

As always, for a full list of our recent releases, check out the Ory Changelog

The Hugging Face Breach Proved Legacy IAM Can't Handle AI

hugging-face-ai-agent-breach

The recent compromise at Hugging Face, driven entirely by an autonomous AI agent, highlighted a critical flaw in modern tech stacks: legacy IAM models were designed strictly for human users. The moment an AI agent goes off-script or suffers an exploit, standard authorization tools fail to distinguish between normal machine workflows and an active breach.

Read how Ory could have prevented this breach and how its modern approach can help you get AI agents under control

Customer Spotlight: RetailMeNot

Customer Case Study: RetailMeNot Hero

Learn how RetailMeNot (a Ziff Davis company) modernized their CIAM infrastructure with Ory, boosting mobile app registrations by 20% and saving $200k in the first year alone.

Read the Case Study

Watch the Case Study

Customer Spotlight: Deriv

Customer Case Study: Deriv Hero

Learn how global broker, Deriv, migrated 3 million users to Ory, cutting engineering overhead by 80% and increasing visitor-to-signup conversions up to 10%.

Read the Case Study

Watch the Case Study

Learn More with Solution Briefs

Ory Agent Security - Authentication, authorization, and audit for agents everywhere

Ory for Financial Services - Modular identity infrastructure built for open banking compliance, zero trust security, and advanced fraud mitigation in an agentic era.

ICYMI - In Case You Missed It

Ory In the News

Ory Names Rob Murray Chief Revenue Officer aand Colleen Shannon Chief Financial Officer to Fuel Its Next Wave of Growth

Why AI Agents Need Idenitity, Not Just Guardrails

Webinars

Locking Down tthe Machine: Securing and Accelerating Enterprise AI Agents with Ory (on-demand)

Zero Trust for a World of Machines: APIs, AI Agents, and Autonomouse Action (on-demand)

Blogs

Ory Agent Security Is Expanding to 11 Harnesses and 13 Agent SDKs

Why Most CIAM and B2B Platforms Fail At Data Residency, and What Ory Does Differently

Ory on Kubernetes: Enterprise Helm Charts Built For Performance, Security, and Observability

From Static Skill Scans to Runtime Agent Control: How Ory Agent Security Addresses the 'Story of Skills' Threat

Ory Hydra Powers OAuth at Cloudflare Scale: and It's Just Getting Started

Changelog Roundup

This update also marks the release of exciting new features, more quality of life improvements and bug fixes:

Ory Network, Ory Hydra, Ory Kratos, Ory Keto, Ory Oathkeeper, Ory Elements v26.3.4: Identity schema deduplication, zero-downtime OAuth2 client secret rotation, partial configuration updates in Hydra, and YugabyteDB support for Enterprise deployments.[changelog]

Ory Netowrk, Ory Hydra, Ory Kratos v26.3.3: Per-project configuration for OAuth 2.0 Device Authorization Grant, customizable legal footer links in Account Experience, and a dedicated FIPS 140-3 build for Kratos. [changelog]

Ory Network, Ory Hydra, Ory Kratos, Ory Keto, Ory Oathkeeper v26.3.2 released: Strengthens security across the network by enforcing strict DNS-label boundaries on wildcard return URLs and CORS origins to prevent matching attacker-registrable hosts. [changelog]

Ory Network, Ory Hydra, Ory Kratos, Ory Polis v26.2.22 released: More reliable and lower-memory identity search, significantly faster database-free OAuth2 logouts, and improved cross-tenant security for Polis identity provider selection. [changelog]

As always you can find the full list of changes over on our changelog.

Full Changelog

Get started today

The new IAM Stack

Get started

GitHub Icon

Slack Icon

X Icon

LinkedIn Icon

YouTube

Ory, 15169 N. Scottsdale Rd., Scottsdale, AZ 85254, USA

© 2026 All rights reserved.

To update your communication preferences or to unsubscribe, visit our email preference center.

[Open and remix this design](https://brew.new/browse/templates/email/pt1_k97p9mkbjx6fyhycjexh4qp6wx8e4773)

[Browse email designs](https://brew.new/browse/templates)
