WorkBuddy Charts Next Phase Focused on Openness and Connectivity
WorkBuddy has outlined its upcoming strategic priorities, emphasizing a shift toward greater openness and connectivity.
The announcement highlights that the company’s next phase will begin by focusing on these two core principles to guide future development and partnerships.
No further technical specifications, timelines, or product updates were disclosed at this stage.
Related articles
AI Agents Rewrite SaaS Monetization Models as Marketplace Platforms Drive Global ISV Growth
The 2026 narrative of SaaS apocalypse driven by AI has reversed following strong earnings from major vendors. Companies including Salesforce, Palantir, Kingdee and Yonyou began reporting AI-related revenue, while IDC and Nvidia CEO Jensen Huang argued that AI agents amplify rather than replace software. At the 2026 Amazon Web Services Software Enterprise Summit in Shenzhen, AWS launched an ISV go-global accelerator and six new AI agents on Marketplace to streamline sales, compliance and partner management. Marketplace now hosts over 30,000 products from 6,000 sellers, with Agentic AI listings growing from 800 to more than 3,000 since July 2025. Chinese ISVs such as PingCAP, Zilliz, Manus and Plaud AI are shifting from simple listings to localized operations and bundled solutions. The platform projects hundreds of billions in transaction volume for 2026, supported by a network of 130,000 global partners. Industry leaders emphasize that future growth depends on embedding AI as core product logic rather than add-on chat interfaces.
Securing 1C Web Client Access with External MFA via Nginx, Keycloak and Active Directory
A detailed implementation separates user browser access from integration traffic by placing MFA enforcement on an external Nginx and Keycloak layer while preserving the original IIS endpoints for automated systems. The architecture uses a new IIS server for employees only, with oauth2-proxy handling OIDC flows against Keycloak federated to Active Directory. Access is restricted to members of a dedicated AD group such as 1C_Web_2FA, and TOTP serves as the second factor. Existing integrations continue to reach the legacy IIS directly from whitelisted IP addresses without triggering interactive authentication. The solution avoids 1C OpenID Authentication, keeps native 1C login intact, and supports desktop shortcuts that launch the web client in a dedicated browser window. Network controls ensure the new IIS cannot be reached directly from the internet, preventing bypass of the MFA gateway.
Avanpost Unveils DAG System for Sensitive File Discovery and Excessive Access Rights Management
Avanpost has launched its new DAG solution designed to control access to unstructured data across file servers, cloud environments, and corporate knowledge bases. The system scans file contents to identify confidential information, maps actual user permissions, and highlights policy violations that official regulations often overlook. Built-in workflow automation routes access review requests to data owners, collects approvals, assigns remediation tasks to IT teams, and verifies changes through follow-up scans. DAG integrates with existing IdM/IAM platforms to factor in employee roles and employment status, automatically triggering access reviews during job changes or terminations. The platform also forwards detected violations to SIEM and SOAR systems for coordinated response and supports both high-load enterprise deployments and simpler mid-market installations. Customers can request on-site pilots to evaluate the solution against their current infrastructure.
Why Complex Password Policies Fail to Protect Companies: Practical Account Security Guidance
Many organizations implement strict password rules requiring at least eight characters with numbers, uppercase letters, and special symbols, plus mandatory changes every 30 days. Employees respond by creating predictable variations such as Company2026!, Company2026@, and Company2026#, which offer little real protection against phishing or credential stuffing. The core issue lies in poor visibility into all accounts across Active Directory, VPN, cloud services, databases, and contractor access rather than password length alone. Effective security begins with full inventory of every account, classification into user, privileged, service, and external types, and clear ownership assignment. Privileged accounts require separate credentials, MFA, minimal rights, and activity logging, while service accounts must avoid hardcoded secrets in configuration files or source code. Password managers must enforce client-side encryption so that even compromised administrator accounts cannot access stored secrets. MFA deployment should prioritize high-risk entry points such as VPN, email, and backup systems, and access revocation must integrate with HR processes to prevent former employees or contractors from retaining credentials.