Tag: identity

One Identity Appoints Michael Henricks as Chief Financial and Operating Officer

Feb 25, 2026 5:37 PM

Tags: business, cyber, finance, identity

Alisa Viejo, CA, United States, February 25th, 2026, CyberNewswire One Identity, a trusted leader in identity security, today announced the appointment of Michael Henricks as Chief Financial and Operating Officer. This decision reflects the continued growth of the business and a focus on aligning financial leadership with operational objectives as One Identity scales. “As One…
One Identity Appoints Michael Henricks as Chief Financial and Operating Officer

Feb 25, 2026 4:37 PM

Tags: finance, identity

Alisa Viejo, CA, United States, 25th February 2026, CyberNewswire First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/02/one-identity-appoints-michael-henricks-as-chief-financial-and-operating-officer/
One Identity Appoints Michael Henricks as Chief Financial and Operating Officer

Feb 25, 2026 4:37 PM

Tags: finance, identity

Alisa Viejo, CA, United States, 25th February 2026, CyberNewswire First seen on hackread.com Jump to article: hackread.com/one-identity-appoints-michael-henricks-as-chief-financial-and-operating-officer/
Malicious NuGet Packages Stole ASP.NET Data; npm Package Dropped Malware

Feb 25, 2026 3:37 PM

Tags: backdoor, cybersecurity, data, identity, malicious, malware

Cybersecurity researchers have discovered four malicious NuGet packages that are designed to target ASP.NET web application developers to steal sensitive data.The campaign, discovered by Socket, exfiltrates ASP.NET Identity data, including user accounts, role assignments, and permission mappings, as well as manipulates authorization rules to create persistent backdoors in victim applications. First seen on thehackernews.com Jump…
Identity-First AI Security: Why CISOs Must Add Intent to the Equation

Feb 24, 2026 5:02 PM

Tags: access, ai, ciso, control, identity, infrastructure

AI agents now provision infrastructure and approve actions, but many inherit over-scoped privileges without proper governance. Token Security explains why CISOs must treat agents as identities and add intent-based controls so access is granted only when purpose and context align. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/identity-first-ai-security-why-cisos-must-add-intent-to-the-equation/
Threat Actors Exploit Weaponized AI to Seize Full Domain Access in Under 30 Minutes

Feb 24, 2026 3:02 PM

Tags: access, ai, cloud, cyber, exploit, identity, intelligence, threat, tool

Threat actors are rapidly weaponizing artificial intelligence to move from initial access to full domain compromise in under half an hour, leaving defenders with almost no room for error or delay. As enterprises adopt AI across development, identity, and cloud workflows, adversaries are abusing the same tools to script lateral movement, automate reconnaissance, and scale…
Shai-Hulud-style NPM worm hits CI pipelines and AI coding tools

Feb 24, 2026 2:02 PM

Tags: ai, authentication, breach, cloud, control, credentials, data, identity, injection, malicious, malware, mfa, radius, tool, worm

Poisoning the AI developer interface: The campaign was specifically flagged for its direct targeting of AI coding assistants. The malware deploys a malicious Model Context Protocol (MCP) server and injects it into configurations of popular AI tools, embedding itself as a trusted component in the assistant’s environment.Once this is achieved, prompt-injection techniques can trick the…
Identity Prioritization isn’t a Backlog Problem – It’s a Risk Math Problem

Feb 24, 2026 2:02 PM

Tags: business, control, identity, risk

Most identity programs still prioritize work the way they prioritize IT tickets: by volume, loudness, or “what failed a control check.” That approach breaks the moment your environment stops being mostly-human and mostly-onboarded.In modern enterprises, identity risk is created by a compound of factors: control posture, hygiene, business context, and intent. Any one of these…
Building Secure SaaS Architecture: Why Identity Must Be Designed from Day One

Feb 24, 2026 1:02 PM

Tags: authentication, compliance, identity, saas

Learn why identity must be built into SaaS architecture from day one to ensure secure authentication, compliance, and scalable growth. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/02/building-secure-saas-architecture-why-identity-must-be-designed-from-day-one/
Malicious NuGet Packages Target ASP.NET Developers to Steal Login Credentials

Feb 24, 2026 1:02 PM

Tags: backdoor, credentials, cyber, identity, login, malicious

Malicious NuGet packages posing as legitimate developer utilities are targeting ASP.NET projects to steal identity credentials and silently backdoor applications through a localhost proxy. All four were published between August 1221, 2024, by a NuGet user named “hamzazaheer” and have collectively amassed a little over 4,500 downloads before takedown requests were submitted. The campaign’s core…
AI Arms Race Shrinks Breakout Time to 29 Minutes as Adversaries Turn GenAI on the Enterprise

Feb 24, 2026 12:00 PM

Tags: ai, attack, crowdstrike, cybercrime, identity, intelligence, threat

Artificial intelligence is no longer just a defensive tool; it is now a core accelerant for cybercriminals and nation-state actors alike. That is the central message from CrowdStrike’s newly released 2026 Global Threat Report, which paints 2025 as the “year of the evasive adversary”, defined by speed, identity abuse and direct attacks on AI systems…
Master Your Passwordless Future: Introducing Thales Authenticator Lifecycle Manager

Feb 24, 2026 10:01 AM

Tags: access, attack, authentication, automation, breach, compliance, container, control, data, fido, Hardware, identity, login, msp, phishing, service, software, tool, zero-trust

Master Your Passwordless Future: Introducing Thales Authenticator Lifecycle Manager madhav Tue, 02/24/2026 – 07:53 The move to passwordless authentication is no longer a distant goal; it’s a present-day necessity. Organizations are rapidly adopting FIDO2 authenticators to defend against phishing and strengthen their security posture. While this shift enhances security, it introduces a new challenge: managing…
The rise of the evasive adversary

Feb 24, 2026 8:01 AM

Tags: access, ai, attack, authentication, breach, china, cloud, credentials, crime, crowdstrike, crypto, data, defense, endpoint, exploit, finance, firewall, group, identity, infrastructure, intelligence, korea, lazarus, leak, mail, malicious, malware, microsoft, monitoring, network, north-korea, open-source, phishing, ransomware, remote-code-execution, russia, saas, service, software, strategy, supply-chain, tactics, theft, threat, tool, update, vpn, vulnerability, windows, zero-day

Big game hunters tighten their grip: CrowdStrike’s research highlights how big game hunting (BGH) ransomware actors have remained the dominant force in the eCrime landscape.Punk Spider, a group responsible for developing and maintaining Russian-language Akira ransomware, and its associated Akira dedicated leak site, conducted 198 intrusions in 2025, a 134% increase year over year. Victim-shaming operations…
When identity isn’t the weak link, access still is

Feb 23, 2026 5:02 PM

Tags: access, breach, identity, software

Stolen tokens and compromised devices let attackers reuse trust without breaking authentication. Specops Software explains why identity alone isn’t enough and how continuous device verification strengthens Zero Trust. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/when-identity-isnt-the-weak-link-access-still-is/
Using CardSpace as a Secure Password Manager

Feb 23, 2026 4:00 PM

Tags: identity, passkey, password, windows

Explore how Windows CardSpace’s ‘Identity Agent’ architecture paved the way for modern Passkeys and secure password management in 2026. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/02/using-cardspace-as-a-secure-password-manager/
Anthropic Didn’t Kill Cybersecurity. It Just Reminded Us There Are Two Doors.

Feb 23, 2026 11:02 AM

Tags: ai, breach, credentials, identity, saas

Anthropic’s Claude Code Security sparked a sharp SaaS market selloff, but investors missed a critical reality: AI code scanning addresses only half of modern cyberattacks. Identity, credentials, and human factors remain the dominant breach vectors. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/02/anthropic-didnt-kill-cybersecurity-it-just-reminded-us-there-are-two-doors/
13 ways attackers use generative AI to exploit your systems

Feb 23, 2026 9:01 AM

Tags: access, ai, attack, authentication, awareness, breach, captcha, ceo, chatgpt, ciso, cloud, credentials, crypto, cyber, cyberattack, cybercrime, cybersecurity, dark-web, data, deep-fake, defense, detection, email, espionage, exploit, extortion, finance, flaw, framework, fraud, google, government, group, hacker, identity, infrastructure, intelligence, law, LLM, login, malicious, malware, marketplace, network, open-source, password, phishing, privacy, ransomware, resilience, risk, saas, scam, service, social-engineering, startup, supply-chain, tactics, technology, theft, threat, tool, vulnerability, zero-day

Facilitating malware development: AI can also be used to generate more sophisticated, or less labour-intensive, malware.For example, cybercriminals are using gen AI to create malicious HTML documents. The XWorm attack, initiated by HTML smuggling, which contains malicious code that downloads and runs the malware, bears the hallmarks of development via AI.”The loader’s detailed line-by-line description…
13 ways attackers use generative AI to exploit your systems

Feb 23, 2026 9:01 AM

Tags: access, ai, attack, authentication, awareness, breach, captcha, ceo, chatgpt, ciso, cloud, credentials, crypto, cyber, cyberattack, cybercrime, cybersecurity, dark-web, data, deep-fake, defense, detection, email, espionage, exploit, extortion, finance, flaw, framework, fraud, google, government, group, hacker, identity, infrastructure, intelligence, law, LLM, login, malicious, malware, marketplace, network, open-source, password, phishing, privacy, ransomware, resilience, risk, saas, scam, service, social-engineering, startup, supply-chain, tactics, technology, theft, threat, tool, vulnerability, zero-day

Facilitating malware development: AI can also be used to generate more sophisticated, or less labour-intensive, malware.For example, cybercriminals are using gen AI to create malicious HTML documents. The XWorm attack, initiated by HTML smuggling, which contains malicious code that downloads and runs the malware, bears the hallmarks of development via AI.”The loader’s detailed line-by-line description…
Identity verification systems are struggling with synthetic fraud

Feb 23, 2026 7:02 AM

Tags: credit-card, fraud, identity

Fake and expired IDs keep showing up in routine customer transactions, from alcohol purchases to credit card applications. The problem shows up most often in industries that … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/02/23/analysis-identity-verification-fraud-report/
Quantum-Resistant Identity and Access Management in Model Contexts

Feb 23, 2026 5:01 AM

Tags: access, identity

Secure your MCP hosts with quantum-resistant identity and access management. Learn about lattice-based signatures, CRYSTALS-Dilithium, and 4D context-aware security. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/02/quantum-resistant-identity-and-access-management-in-model-contexts/
How are secrets protected in an Agentic AI-driven architecture

Feb 23, 2026 5:01 AM

Tags: ai, cybersecurity, identity, strategy

How Does Non-Human Identity Management Boost Security in AI Architecture? What is the role of Non-Human Identity (NHI) management in securing AI-driven architecture? With cybersecurity professionals grapple with the complexities of protecting digital environments, the management of NHIs stands as a critical strategy in enhancing security measures. Where systems autonomously make decisions, the protection of……
What role does Agentic AI play in identity and access management

Feb 22, 2026 5:02 AM

Tags: access, ai, cloud, identity, threat

How Do Non-Human Identities Transform Cloud Security? Are your organization’s security measures keeping pace with evolving threats? The rise of Non-Human Identities (NHIs) is reshaping how we approach cloud security by closing gaps that have long persisted between security and R&D teams. Where businesses increasingly migrate to cloud environments, the effective management of these machine……
Can Agentic AI boost confidence in privileged access management

Feb 22, 2026 5:02 AM

Tags: access, ai, identity

How Can We Enhance Security with Effective Non-Human Identity Management? Can your organization’s security posture handle the growing complexity of machine identities and their secrets? With the increasing deployment of microservices and containerized applications, managing non-human identities (NHIs) has become a critical part of information security strategies. But what makes NHI management so integral to……
Romanian hacker faces up to 7 years for breaching Oregon emergency management department

Feb 20, 2026 9:02 PM

Tags: computer, hacker, identity

In court on Thursday, Catalin Dragomir pleaded guilty to obtaining information from a protected computer and one count of aggravated identity theft. First seen on therecord.media Jump to article: therecord.media/romanian-hacker-faces-7-years-oregon-breach
ISMG Editors: No Honor Among Ransomware Thieves

Feb 20, 2026 8:02 PM

Tags: ai, cybercrime, identity, ransomware, resilience, risk, technology

Also: AI, Machine Identity Risks; Europe’s Digital Sovereignty Push. In this week’s panel, four ISMG editors examined how cybercriminals may be turning on each other, what security leaders are really saying about machine identities and AI risk, and how shifting U.S.-Europe dynamics are reshaping technology resilience and digital sovereignty. First seen on govinfosecurity.com Jump to…
Ukrainian man jailed for identity theft that helped North Koreans get jobs at US companies

Feb 20, 2026 7:01 PM

Tags: identity, jobs, north-korea, theft, ukraine

A Ukrainian man has been sentenced for helping North Koreans gain fraudulent employment at dozens of U.S. companies and funnel that money back to the regime to fund its nuclear weapons program. First seen on techcrunch.com Jump to article: techcrunch.com/2026/02/20/ukrainian-man-jailed-for-identity-theft-that-helped-north-koreans-get-jobs-at-us-companies/
Dynamic Objects in Active Directory: The Stealthy Threat

Feb 20, 2026 6:01 PM

Tags: access, attack, blueteam, breach, cloud, computer, container, control, credentials, cve, data, defense, detection, dns, endpoint, group, identity, malicious, microsoft, monitoring, password, powershell, risk, soc, strategy, threat, tool, update, vulnerability

Active Directory’s “dynamic objects” feature offers attackers a perfect evasion cloak. These objects automatically self-destruct without a trace, so they allow adversaries to bypass quotas, pollute access lists, and persist in the cloud, leaving forensic investigators with nothing to analyze. Key takeaways The threat: Dynamic objects self-delete without leaving any traces, or “tombstones” in AD…
Age verification vendor Persona left frontend exposed

Feb 20, 2026 4:01 PM

Tags: data-breach, identity

Behind a basic age check, researchers say Persona’s system runs extensive identity, watchlist, and adverse-media screening. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/02/age-verification-vendor-persona-left-frontend-exposed/
Identity Cyber Scores: The New Metric Shaping Cyber Insurance in 2026

Feb 20, 2026 1:01 PM

Tags: access, attack, authentication, cyber, identity, insurance, metric, mfa, password

With one in three cyber-attacks now involving compromised employee accounts, insurers and regulators are placing far greater emphasis on identity posture when assessing cyber risk. For many organizations, however, these assessments remain largely opaque. Elements such as password hygiene, privileged access management, and the extent of multi-factor authentication (MFA) coverage are First seen on thehackernews.com…
Ukrainian National Sentenced to 5 Years in North Korea IT Worker Fraud Case

Feb 20, 2026 1:01 PM

Tags: fraud, identity, korea, north-korea, technology, theft, ukraine

A 29-year-old Ukrainian national has been sentenced to five years in prison in the U.S. for his role in facilitating North Korea’s fraudulent information technology (IT) worker scheme.In November 2025, Oleksandr “Alexander” Didenko pleaded guilty to wire fraud conspiracy and aggravated identity theft for stealing the identities of U.S. citizens and selling them to IT…