Identity and Access Management

Signed, Sealed, Stolen Hackers Used DigiCert to Certify Malware
Application Security
Signed, Sealed, Stolen: Hackers Used DigiCert to Certify Malware
Attackers compromised DigiCert support staff via a chat-delivered screenshot, used their access to obtain code-signing certificates, and signed Zhong Stealer malware.
When Amazon Sends the Phishing Email
Cybersecurity
When Amazon Sends the Phishing Email
Threat actors are systematically abusing Amazon SES to send phishing emails that pass SPF, DKIM, and DMARC checks — turning AWS's own email infrastructure against ...
Stolen Credentials and Zero Trust - Preventing Privilege Escalation in Security Breaches
Cybersecurity
Stolen Credentials and Zero Trust: Preventing Privilege Escalation in Security Breaches
Stolen credentials often lead to unchecked privilege escalation and security breaches, but identity-first Zero Trust offers a strategic solution.
Stolen Credentials Are Turning Authentication Systems Into Attack Surfaces
Cybersecurity
Stolen Credentials Are Turning Authentication Systems Into Attack Surfaces
Discover how wearable biometric authentication is reshaping identity verification by focusing on the user, rather than the session.
Critical Flowise Vulnerability Puts Systems at Risk of Code Execution
Cybersecurity
Critical Flowise Vulnerability Puts Systems at Risk of Code Execution
A critical vulnerability in Flowise lets attackers execute arbitrary code using improperly validated JavaScript.
Identity-Based Access Control for AI Agents Is Now a Security Necessity
Cybersecurity
Identity-Based Access Control for AI Agents Is Now a Security Necessity
How identity-based access control for AI agents helps safeguard against misuse and data exposure.
WhatsApp Introduces Parent-Controlled Accounts for Younger Users
Cybersecurity
WhatsApp Introduces Parent-Controlled Accounts for Younger Users
WhatsApp rolls out a feature for parent-managed accounts, enhancing safety for pre-teen users.
Deepfake and Injection Attacks Are Targeting Identity Verification Systems
Cybersecurity
Deepfake and Injection Attacks Are Targeting Identity Verification Systems
Understand how deepfake and injection attacks affect identity verification processes and what enterprises can do to defend against them.
Cloud-Based Password Managers Face New Security Vulnerabilities
Cybersecurity
Cloud-Based Password Managers Face New Security Vulnerabilities
A recent study uncovers vulnerabilities in popular cloud-based password managers like Bitwarden, Dashlane, and LastPass. Researchers warn these weaknesses could lead to integrity issues or ...
Monnai Secures $12 Million to Bolster Identity and Risk Data Services
Identity and Access Management
Monnai Secures $12 Million to Bolster Identity and Risk Data Services
The recent funding will enable Monnai to enhance its identity verification and risk management services, targeting financial institutions and digital firms.