Category · 247 articles

Trending

Hot IAM topics and breaking news in Identity and Access Management

Stay updated with the latest trending topics in Identity and Access Management. These articles cover breaking news, hot discussions, and emerging trends in authentication, authorization, and security.

Securing AI Document Agents with LlamaIndex and Auth0

Learn how to secure AI document agents using LlamaIndex and Auth0 FGA, addressing the unique challenges posed by AI-driven document retrieval and synthesis.

Bogus LinkedIn Message Alerts Enable Credential Siphoning

Recent LinkedIn phishing attacks exploit message alerts to steal credentials. Learn how to protect your accounts and users from these threats.

EvilTokens Emerges as New Phishing-as-a-Service Platform for Microsoft Account Takeover

Learn about EvilTokens, a new Phishing-as-a-Service platform targeting Microsoft accounts. Discover how it works, the security risks involved, and best practices to protect your applications and users.

Credential-Stealing Campaign Uses AI for Evasion at Every Stage

Recent research reveals a sophisticated AI-driven credential-stealing campaign that uses automation at every stage. Learn how this impacts IAM and what developers can do to protect their systems.

Crypto Heads into 2026 with Privacy, Decentralized Identity on the Line

Crypto faces significant privacy and decentralized identity challenges in 2026. Learn how these issues impact security and what developers can do to address them.

TeamPCP Plants WAV Steganography Credential Stealer in telnyx PyPI Package

TeamPCP exploited WAV steganography to plant a credential stealer in the telnyx PyPI package. Learn how this works and how to protect yourself.

AI Frenzy Feeds Credential Chaos: Secrets Leak Through Code, Tools, and Infrastructure

Learn how the AI boom is causing credential chaos and how to secure your secrets in code, tools, and infrastructure.

Zero Trust and TIC 3.0: Mission Requirements for Agencies

Learn how zero trust and TIC 3.0 are becoming mandatory for agencies. Understand the requirements, implementation steps, and best practices to stay compliant and secure.

Device Code Phishing Campaign Targets 340+ Microsoft 365 Organizations Using OAuth Abuse

Learn about the recent device code phishing campaign targeting Microsoft 365 organizations and how to protect your systems from OAuth abuse.

Compromised litellm PyPI Package Delivers Multi-Stage Credential Stealer - Sonatype

Breaking: Compromised litellm PyPI package steals credentials through a multi-stage process. Learn how to protect your systems immediately.

Akamai Guardicore Segmentation Transforms Zero Trust with New AI-Powered Capabilities

Akamai Guardicore Segmentation leverages AI to transform zero trust security. Learn how it dynamically segments traffic and enhances protection against threats.

How Behavioral Analytics Stop Linux C2 & Credential Theft - Palo Alto Networks

Learn how Behavioral Analytics can prevent Linux C2 attacks and credential theft. Discover real-world examples and best practices to secure your infrastructure.

Mews Boosts Hotel Security With Free Single Sign-On Access

Mews introduces free Single Sign-On access to enhance hotel security. Learn how SSO can protect your hotel's systems and improve user experience.

Auth0 MCP Server Extension for Gemini CLI: Simplifying Tenant Management

Learn how the new Auth0 MCP Server Extension for Gemini CLI streamlines Auth0 tenant management with seamless authentication and context persistence.

AitM Phishing in 2026: How Starkiller and Tycoon 2FA Bypass MFA — and How to Defend

AitM phishing attacks bypass TOTP, push, and SMS MFA by proxying real login pages. Starkiller and Tycoon 2FA show how. Only FIDO2 passkeys stop it — here's why and how to deploy.

IETF AIMS Framework: How AI Agents Will Authenticate with SPIFFE, WIMSE, and OAuth 2.0

IETF AIMS (draft-klrc-aiagent-auth-00) defines how AI agents authenticate using SPIFFE SVIDs, WIMSE workload identity, and OAuth 2.0 — replacing dangerous API keys with short-lived, attested credentials. 8-layer framework explained for developers.

Securing Third-Party Procurement Platforms with Enterprise SSO

Learn how to secure third-party procurement platforms with Enterprise SSO to enhance security and streamline access management. Protect your organization from unauthorized access and improve compliance.

Dashlane Brings AI Into Credential Security With Omnix Advisor - MSSP Alert

Dashlane's Omnix Advisor leverages AI to enhance credential security. Learn how it works and how to integrate it into your IAM systems to protect your organization.

Google Cloud Wants Real-Time Agent Trust Scores. Okta Launches Agent Identity Platform April 30. The Race Is On.

Google Cloud introduces real-time agent trust scores, while Okta launches its Agent Identity Platform. Explore how these advancements reshape agent identity management and the challenges ahead.

OpenClaw Bypasses EDR, DLP, and IAM Without Alerts

OpenClaw can bypass EDR, DLP, and IAM without triggering alerts. Learn how this tool works and what steps you can take to secure your systems immediately.