CyberArk Privilege Cloud Version 14.7 Release

September 25, 2025 Lilach Faerman Koren

CyberArk Privilege Cloud 14.7 Release

CyberArk Privilege Cloud version 14.7 improves user experience and operational efficiencies in the CyberArk Identity Security Platform. This release introduces significant updates and improvements, including Secure Access space and the new Identity Protection space, which features Threat Detection and Response (TDR), Risk Management, and more.

Release highlights:

Secure Access space release
Threat Detection and Response release
Risk Management release
Manage Account Dependents via REST API
PSM 64-bit WebAppDispatcher support
Enforcing password lifecycle management across Azure and Identity WebApp
VMWare ESX/i via API - Support reconciliation with domain account

New! Secure Access space

We are excited to launch the Secure Access space, which delivers a centralized interface for accessing applications, cloud services, privileged resources, and infrastructure from a single, intuitive location.

Key benefits:

Enhanced usability and simplified navigation
Significantly faster load times

No action is required from customers; environments will be updated automatically.

Learn more about the Secure Access space.

CyberArk launches TDR: Unified Identity Detection & Response

This marks a significant milestone in our mission to protect every identity with the right level of privilege controls. TDR enables real-time, AI-powered detection and response for identity-centric threats, delivering contextual visibility across privileged and workforce identities.

Why it matters:

This marks the transition of capabilities from User Behavior Analytics (UBA) and Identity Security Intelligence (ISI) to other parts of the Identity Security Platform, with detection and response as a starting point.
This evolution reflects our broader strategy to unify proactive and reactive identity protection into a single platform experience.
With CORA AI™ driving prioritization and automated workflows, TDR delivers a modern, efficient, and user-centric approach to stopping identity-based attacks before they escalate.

Availability:

It is now available to customers in US-East, Canada, UK, Frankfurt, Sydney, and Singapore, with additional regions rolling out soon.

Learn more about CyberArk TDR.

New! Risk Management

Hosted within our newly launched Identity Protection space, Risk Management delivers a unified experience for visibility, prioritization, and remediation of identity-related risks.

Why it matters:

This helps organizations mature their identity security programs in alignment with the CyberArk Blueprint.
It provides a single view of identity-related risks across the identity security platform.
With actionable recommendations and a centralized dashboard, organizations can efficiently prioritize, remediate, and track progress toward an improved identity posture.

Key capabilities:

By integrating with the CyberArk Discovery service, Risk Management introduces powerful capabilities:

Visibility into unprotected privileged accounts.
A unified view of risk-based recommendations: Delivered with greater granularity, recommendations include a clear distinction between account types (i.e., Domain Admins vs. other privileged accounts) and classification of local admins based on machine types (i.e., servers vs. workstations).
Progress tracking to measure PAM program maturity and accelerate time-to-value.
A digital interactive version of the CyberArk Blueprint.

Availability:

Risk Management is currently available in the US, UK, Europe, Canada, Singapore, and Australia, with the remaining regions (Mumbai, Tokyo, Jakarta, UAE, Milan, and Tel Aviv) to follow in the coming months.

Learn more about Risk Management.

Manage Account Dependents via REST API

With this release, customers using Central Policy Manager (CPM) can now create, edit, and delete Account Dependents programmatically via API. This enables automation and significantly improves operational efficiencies.

Learn more about managing account dependents with REST API.

PSM 64-bit WebAppDispatcher support

The Privileged Session Manager (PSM) out of the box WebApp infrastructure now includes support for a 64-bit WebAppDispatcher. This optimizes all components within the WebApp process for 64-bit architecture, offering enhanced performance and security. If a target WebApp does not support 64-bit, the system will seamlessly revert to a 32-bit dispatcher to maintain compatibility.

Enforcing password lifecycle management across Azure and Identity WebApp

We’re excited to introduce automatic synchronization of Azure secrets with the Azure Identity WebApp. This new capability:

Extends the Azure Keys Platform by enabling real-time, automatic synchronization of all stored Azure secrets with the Azure Identity WebApp.
Provides a centralized, consistent and up-to-date credential repository, reducing the need for manual syncs and significantly improving overall system reliability.

VMWare ESX/i via API - Support reconciliation with domain account

VMware ESX/i via API plugin now supports reconciliation using domain accounts. Until now, only local accounts could be used for reconciliation. This enhancement brings greater flexibility and simplifies privileged access management in domain-based environments.

To learn more about the new features of CyberArk Privilege Cloud, please visit:

Release notes and documentation.

Upgrade Process for Privilege Cloud Connector.

Component downloads are available in the CyberArk Marketplace.

No Previous Articles

Sandworm in the supply chain: Lessons from the Shai-Hulud npm attack on developer and machine identities

Do you know why Shai-Hulud should raise your hackles? Unless you’ve spent time on Arrakis in Frank Herbert’...

Up Your Security I.Q. by Checking Out Our Collection of Curated Resources.

CyberArk Privilege Cloud Version 14.7 Release

New! Secure Access space

CyberArk launches TDR: Unified Identity Detection & Response

New! Risk Management

Manage Account Dependents via REST API

PSM 64-bit WebAppDispatcher support

Enforcing password lifecycle management across Azure and Identity WebApp

VMWare ESX/i via API - Support reconciliation with domain account

Next Article

STAY IN TOUCH

CyberArk Privilege Cloud Version 14.7 Release

New! Secure Access space

CyberArk launches TDR: Unified Identity Detection & Response

New! Risk Management

Manage Account Dependents via REST API

PSM 64-bit WebAppDispatcher support

Enforcing password lifecycle management across Azure and Identity WebApp

VMWare ESX/i via API - Support reconciliation with domain account

Next Article

Recommended for You

Do you know why Shai-Hulud should raise your hackles? Unless you’ve spent time on Arrakis in Frank Herbert’s Dune or the npm ecosystem this month, the name Shai-Hulud might not ring a bell. In...

We’ve spent decades treating persuasion like an art—something you could master if you had charisma, practice, or luck. Lawyers use it to hone arguments. Marketers use it to craft taglines. On the...

Across financial services operations, machine identities play critical roles, but in many organizations, these cryptographic keys, API tokens, certificates, and service accounts remain chronically...

Financial cybersecurity has never been a static discipline. Over two decades in this industry, I’ve seen it transform from a compliance checkbox to a cornerstone of business resilience—usually...

In the world of identity security, organizations evaluating solutions want to understand why CyberArk stands out as the top choice. Leaders aren’t just looking for a rundown of capabilities – they...

When new security research hits the headlines, it often sparks a predictable wave of worry: should we turn off features we rely on? Should we rethink basic workflows? That’s exactly the case with...

Picture this: You’re having your morning coffee when your phone buzzes with the kind of alert that makes security professionals break into a cold sweat. A single API key, leaked on GitHub months...

A sprawling cyber campaign is turning gamers’ hunger to gain an edge into a massive payday for threat actors who are leveraging over 250 malware samples to steal credentials and cryptocurrencies....

Introduction Not too long ago I read an interesting blogpost by SpecterOps about Microsoft EPM that got my attention as I was not aware of this Microsoft product/feature. It was interesting to...

It was recently reported that Salesloft’s Drift application was breached, allowing unauthorized access to its customers’ Salesforce data and affecting hundreds of organizations, including...

Fast-moving cloud environments demand speed, but without the right access controls they invite risk. Resources such as virtual machines, containers, and services are created, modified, and...

In a bad dream, you open the closet. You think you know exactly what’s in there: a few SSH keys, a bunch of TLS certificates, and some secrets like API keys locked in what you...

The quantum threat isn’t theoretical—it’s operational. Quantum computing is rapidly shifting from research to reality, forcing chief information security officers (CISOs) to rethink cryptography,...

For many of us, the term “cloud security breach” conjures meticulous attack plans executed by sophisticated criminal syndicates. But in reality, “attacks” can be far more mundane: maybe some...

For years, separating day-to-day user activity from administrative tasks through secondary accounts was considered a security best practice. But as identity threats grow more sophisticated and...

Secrets management is a foundational pillar of cloud security. It enables secure storage, rotation, and access control for application secrets. But in Kubernetes environments, secrets don’t just...

For every enterprise CISO in the world right now, the burning question isn’t about cloud, TPRM, or internal threats. It’s about how to securely and responsibly adopt AI—specifically, agentic AI,...

As ransomware strains hospital operations and supply‑chain attacks target energy grids, Australia’s public and regulated sectors need proven cyber resilience. At the heart of most breaches lie...

Understanding the ‘Plague’ Pluggable Authentication Module (PAM*) backdoor in Linux systems ‘Plague’ represents a newly identified Linux backdoor that has quietly evaded detection by traditional...

AI agents are on the rise. They can spin up, act independently, use tools, and make decisions—often without real-time human oversight. They promise incredible productivity but also introduce new...