Tag · 213 articles
Security
Mini Shai Hulud: Compromised @antv npm Packages Enable CI/CD Credential Theft
Learn about the Mini Shai Hulud attack on @antv npm packages and how it can lead to CI/CD credential theft. Protect your projects now.
OAuth Risk Explained: Hidden Threats in SaaS
GitHub's OAuth token leak exposed 100K repos. Learn how OAuth risks can affect SaaS and how to secure your integrations immediately.
IAM Union Lockout: Leonardo DRS CEO Takes Home $8.2M Amidst Labor Dispute
Leonardo DRS CEO took home $8.2M while locking out IAM union members building Army battlefield systems. Learn how this impacts security and what developers can do.
3 OAuth TTPs Seen This Month — and How to Detect Them with Entra ID Logs
Discover the latest OAuth TTPs and learn how to detect them using Entra ID logs. Protect your applications from attacks with practical security measures.
DeepLoad Uses ClickFix for Fileless Credential Theft
Learn how DeepLoad leverages ClickFix for fileless credential theft and what steps developers can take to protect their systems immediately.
Building Multi-Factor Authentication with TOTP and WebAuthn
Learn how to build robust Multi-Factor Authentication using TOTP and WebAuthn. This guide includes code examples and security best practices.
WorkOS Releases auth.md: An Open Agent Registration Protocol Built on OAuth Standards
WorkOS introduces auth.md, an open agent registration protocol based on OAuth standards. Learn how it simplifies identity management and enhances security in your applications.
FBI Warns of Kali Oauth Stealers
FBI warns of Kali Oauth stealers targeting OAuth vulnerabilities. Learn how to protect your applications and prevent unauthorized access.
FBI Warns Kali365 Phishing Kit Hijacks Microsoft 365 OAuth Tokens
FBI warns of Kali365 phishing kit targeting Microsoft 365 OAuth tokens. Learn how to protect your organization from this threat.
Real-Time Fraud Detection Using Behavioral Biometrics in IAM
Learn how to implement real-time fraud detection using behavioral biometrics in IAM for enhanced security. Get practical examples and security tips.
Decentralized Identity (DID) and Verifiable Credentials Explained
Learn how Decentralized Identity (DID) and Verifiable Credentials work, their implementation, and security considerations. Essential for modern IAM systems.
Kubernetes Service Mesh Security with Istio and OAuth2
Secure your Kubernetes microservices with Istio and OAuth2. Learn how to implement OAuth2 in Istio for robust authentication and authorization.
GitOps for IAM: Managing Identity Infrastructure as Code
Learn how to implement GitOps for IAM to manage identity infrastructure as code. Get a comprehensive guide with code examples and security tips.
Navigating Authorization Confusion with FedRAMP: Insights from Nicole Thompson
Learn how FedRAMP's Nicole Thompson clarifies authorization confusion, ensuring secure and compliant cloud services. Essential for IAM engineers and developers.
Implementing Privacy-Preserving Analytics in CIAM Systems
Learn how to implement privacy-preserving analytics in CIAM systems for secure data analysis. Discover techniques like differential privacy and encryption to protect user identities.
Maximizing Akamai Risk Signals in Auth0 Actions
Learn how to maximize Akamai's risk signals in Auth0 Actions to prevent identity attacks and enhance security. This integration turns edge intelligence into actionable events.
JWT Decode TypeScript: Type-Safe Token Handling with Examples
Learn how to handle JSON Web Tokens (JWT) in a type-safe manner using TypeScript. Get practical examples and security best practices.
JWT Decode in React Native: Complete Implementation Guide with Security Best Practices
Learn how to implement JWT decode in React Native for secure authentication. Complete guide with code examples and security best practices.
Zero Trust Isn’t Broken, But Most Companies Are Doing It Wrong
Learn why zero trust isn't broken but many companies are misimplementing it. Get actionable tips to secure your infrastructure effectively.