Tag · 294 articles
Iam
MokN Raises €12.9 Million to Combat Credential Theft
MokN raises €12.9 million to combat credential theft. Learn how this funding will impact IAM strategies and best practices for securing credentials.
Fake Party Invitation Phishing Scam Spoofs Google and Microsoft OAuth Logins: FTC Warns
Learn about the latest OAuth phishing scam targeting Google and Microsoft logins. Discover how to protect your applications and users from this threat.
Agentic AI Authentication: Securing AI Agents in Enterprise Systems
Learn how to implement Agentic AI Authentication for secure AI agent management in enterprise systems. Complete guide with code examples and security tips.
Hyperledger Indy and Aries for Decentralized Identity
Discover Hyperledger Indy and Aries for decentralized identity management. Learn how they enhance security and privacy in IAM systems.
NSA Unveils Interactive Resource Hub for Zero Trust Implementation Guidance
The NSA's new Interactive Resource Hub provides essential guidance for implementing Zero Trust. Learn how to enhance your security posture with real-world examples and best practices.
OAuth Device Code Flow Security: How to Detect and Prevent Device Code Phishing
OAuth device code phishing (RFC 8628 abuse) bypasses MFA and steals M365 refresh tokens without a password. Learn how to disable device authorization grant in Entra ID, Keycloak, Auth0, and detect attacks with SIEM rules.
Federal Cybersecurity: Advancing Phishing-Resistant MFA
Learn how federal cybersecurity is advancing with phishing-resistant MFA. Discover best practices and implementation strategies to protect your systems.
FIDO vs FIDO2: Understanding the Evolution of Passwordless Authentication
Dive into the evolution of passwordless authentication with FIDO and FIDO2. Learn how to implement FIDO2 using WebAuthn and understand the security benefits.
Oppstar Secures MIDA-backed ARM Access Token for AI Chip Design Project; Shares Rally 10%
Oppstar secures MIDA-backed ARM Access Token for AI chip design, enhancing project security. Learn how to implement best practices immediately.
PingOne DaVinci Flow Designer: Visual Identity Orchestration Tutorial
Learn how to implement identity orchestration workflows using PingOne DaVinci Flow Designer. This tutorial covers creating, configuring, and testing flows with practical examples.
How Did a Stolen OAuth Token Bypass MFA in the $2M Supply Chain Attack?
Breaking: OAuth token breach affects Salesforce ecosystem. Learn what happened, who's impacted, and how to protect your integrations immediately.
Passkeys Adoption Guide: Implementing FIDO2 WebAuthn in Production
Add passkeys to your app with FIDO2 WebAuthn — Keycloak setup, Auth0/Okta/Entra ID integration, NotAllowedError fixes, and server-side credential storage. Complete production guide with @simplewebauthn/server examples.
Zero Trust Architecture Implementation: A Practical Guide for IAM Engineers
Learn how to implement Zero Trust Architecture for enhanced security. This practical guide covers key principles, steps, and best practices with real-world examples.
Senate Democrats Move to Roll Back Medicare AI Prior Authorization Pilot
Senate Democrats move to roll back the Medicare AI prior authorization pilot. Understand the implications for healthcare IT and IAM professionals.
Implementing Step-Up Authentication for Sensitive Operations
Learn how to implement step-up authentication for securing sensitive operations. Complete guide with code examples and security tips.
mTLS Certificate Authentication for Microservices in Kubernetes
mTLS certificate authentication for Kubernetes microservices — enable Istio STRICT mode, automate rotation with cert-manager, debug CERTIFICATE_VERIFY_FAILED errors, and implement SPIFFE/SPIRE workload identity for zero-trust service meshes.
PlayStation Players Warn of New Account Takeover Method Targeting PSN
PlayStation Network faces a new threat as attackers exploit third-party apps to take over user accounts. Learn how to protect your accounts and what developers can do to mitigate risks.
Implementing Privileged Access Management (PAM) in Cloud Environments
Learn how to implement Privileged Access Management (PAM) in cloud environments for enhanced security. Get hands-on with AWS and Azure examples.
GitHub Breach Explained: Repo Exposure, OAuth Risk & Supply Chain Attacks
GitHub's recent OAuth token leak exposed 100K+ repos. Learn what happened, who's impacted, and how to protect your integrations immediately.