Tag: identity
-
MITRE CVE Program Funding Set To Expire
Tags: cve, cvss, cybersecurity, data, github, identity, intelligence, mitre, monitoring, nist, technology, update, vulnerability, vulnerability-managementMITRE’s CVE program has been an important pillar in cybersecurity for over two decades. The lack of certainty surrounding the future of the CVE program creates great uncertainty about how newly discovered vulnerabilities will be cataloged. Background On April 15, reports circulated that the contract for funding the Common Vulnerabilities and Exposures (CVE) program along…
-
Evolution to Detective Identity Security
This week I wrote a guest article for Breez Security discussing the need for and evolution to a more detective element in our identity security landscape. Our the past two decades organisations and IAM related vendors have supported a model of security controls embedded within particular point solution spaces. Concepts such as MFA, credential vaulting,……
-
ChatGPT Image Generator Abused for Fake Passport Production
OpenAI’s ChatGPT image generator has been exploited to create convincing fake passports in mere minutes, highlighting a significant vulnerability in current identity verification systems. This revelation comes from the 2025 Cato CTRL Threat Report, which underscores the democratization of cybercrime through the advent of generative AI (GenAI) tools like ChatGPT. Historically, the creation of fake…
-
Justifying Investments in Advanced IAM Technologies
Why is IAM Technology Investment Crucial? A data breach can have devastating consequences, impacting customer trust and incurring heavy financial losses. Unlike traditional password protection, the innovative non-human identities (NHIs) and secrets management approach offers robust protection from such breaches. However, justifying investments in such avant-garde strategies, specifically Identity and Access Management (IAM) technologies, is……
-
Hertz Data Breach Exposes Customer Personal Information to Hackers
The Hertz Corporation has confirmed that sensitive personal information belonging to customers of its Hertz, Dollar, and Thrifty brands was compromised after hackers targeted a vendor’s file transfer platform. The breach has sparked concerns about identity theft and privacy, prompting Hertz to offer free identity monitoring services for affected individuals. According to an official notice…
-
Top Four Considerations for Zero Trust in Critical Infrastructure
Tags: access, ai, attack, authentication, automation, best-practice, breach, business, cctv, ceo, cloud, communications, compliance, corporate, cyber, cybersecurity, data, defense, email, encryption, exploit, finance, group, hacker, healthcare, identity, infrastructure, iot, law, malicious, mfa, nis-2, privacy, regulation, risk, saas, service, software, strategy, threat, tool, vulnerability, zero-trustTop Four Considerations for Zero Trust in Critical Infrastructure madhav Tue, 04/15/2025 – 06:43 TL;DR Increased efficiency = increased risk. Critical infrastructure organizations are using nearly 100 SaaS apps on average and 60% of their most sensitive data is stored in the cloud. Threat actors aren’t naive to this, leading to a whopping 93% of…
-
Agentic AI is both boon and bane for security pros
Recent agentic security signposts: Recently, we have seen numerous examples of how quickly building your own autonomous AI agents has taken root. Microsoft last month demonstrated six new AI agents that work with its Copilot software that talk directly to its various security tools to identify vulnerabilities, flag identity and asset compromises. Simbian is hosting…
-
Identity Threat Detection and Response (ITDR) – Identitätsschutz ist nicht mehr optional
First seen on security-insider.de Jump to article: www.security-insider.de/sicherheitsrisiken-malware-identitaetsmissbrauch-deutschland-a-cf9f381f89761c71d4bb989e7980e833/
-
Inside IETF Bangkok: Shaping the Future of Workload Identity and Access Management
4 min readHow my week went exploring the emerging WIMSE standard and the meticulous work shaping secure, cross-domain workload interactions. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/04/inside-ietf-bangkok-shaping-the-future-of-workload-identity-and-access-management/
-
Government faces claims of serious security and data protection problems in One Login digital ID
The Government Digital Service was warned about serious cyber security and data protection problems in its flagship digital identity system, with insider claims that the data of three million users may still be at risk First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366622533/Government-faces-claims-of-serious-cyber-security-and-data-protection-problems-in-One-Login-digital-ID
-
How DigitalOcean Moved Away From Manual Identity Management
DigitalOcean executives describe how they automated and streamlined many of the identity and access management functions which had been previously handled manually. First seen on darkreading.com Jump to article: www.darkreading.com/identity-access-management-security/how-digitalocean-moved-away-from-manual-identity-management
-
Adaptive MFA: The Future of Dynamic Identity Security in 2025
Adaptive MFA is no longer optional”, it’s a strategic imperative. By blending contextual intelligence with user-centric design, businesses can thwart cyber threats, comply with regulations, and foster trust in an increasingly digital world. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/04/adaptive-mfa-the-future-of-dynamic-identity-security-in-2025/
-
Free to Innovate with Secure Machine Identity Management
Why does Machine Identity Management matter for Secure Innovation? Understanding Non-Human Identities (NHIs) Do you know the vast number of operations carried out on the cloud today are managed by non-human entities? That’s right. Non-Human Identities or NHIs make up the majority of individuals making calls to your servers, databases, APIs, and other sensitive resources….…
-
Building Trust with Solid NHIDR Approaches
Building Trust with Efficient NHIDR Approaches: An Imperative in Today’s Cybersecurity Landscape? Can implementing solid Non-Human Identity Detection and Response (NHIDR) approaches contribute toward building trust and enhancing cybersecurity defenses? For security professionals grappling with the escalating challenge of protecting machine identities and secrets within complex IT ecosystems, the answer is a resounding yes. NHIDR……
-
Why Some Vendors Upcharge for CRQ Integrations
Picture this: You’re in the middle of preparing for a board meeting. The stakes are high, and the numbers you present could help you secure a budget for the next 12-24 months. Over the past several months, you’ve painstakingly built a security ecosystem, data pouring in from endpoints, cloud systems, identity solutions, threat intelligence feeds,……
-
A Guide to Managing Machine Identities – Part 3
Tailoring Machine Identity Management to Specific Industry Needs A one-size-fits-all security approach to machine identity management cannot address the unique challenges of different industries. Instead, security strategies should be tailored to meet each industry’s specific needs, including access control, continuous monitoring and compliance requirements. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/blogs/guide-to-managing-machine-identities-part-3-p-3848
-
A Guide to Managing Machine Identities – Part 2
Lowering Machine Identity Risks in AI, ML and Bot Workflows While AI, ML and bot workflows boost efficiency, they also expand the attack surface. Over-permissioned identities, exploitable vulnerabilities and AI misuse pose significant security risks. AI-driven security tools can mitigate these risks by detecting anomalies and automating threat response. First seen on govinfosecurity.com Jump to…
-
Companies House goes live with One Login ID verification
People can verify their identity with Companies House using Gov.uk One Login as the central government body becomes the 36th service to start using the digital identity system First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366622472/Companies-House-goes-live-with-One-Login-ID-verification
-
Ping Identity CEO On Channel Revamp And Going ‘All-In With Partners’
In an interview with CRN, Ping Identity Founder and CEO Andre Durand says the company is making a ‘complete commitment to partners’ with its debut of its redesigned Nexus Partner Program. First seen on crn.com Jump to article: www.crn.com/news/security/2025/ping-identity-ceo-on-channel-revamp-and-going-all-in-with-partners
-
Ping Identity startet neues optimiertes Partnerprogramm mit Partner Advisory Board
Als weiteres Element zur Stärkung der Partnerstrategie kündigt Ping Identity den Start eines Partner Advisory Boards an. In diesem Gremium arbeiten führende Partnerunternehmen und Ping-Vertreter gemeinsam an der strategischen Weiterentwicklung First seen on infopoint-security.de Jump to article: www.infopoint-security.de/ping-identity-startet-neues-optimiertes-partnerprogramm-mit-partner-advisory-board/a40467/
-
Semperis Hires Tech Industry Vet Eric Purcell As New Channel Chief
Identity protection vendor Semperis is looking to expand its partner base under its new channel chief, Eric Purcell, formerly the channel head at companies including Cradlepoint. First seen on crn.com Jump to article: www.crn.com/news/security/2025/semperis-hires-tech-industry-vet-eric-purcell-as-new-channel-chief
-
Embracing the Future: Mastering Your Cybersecurity Strategy With an Identity Driven Security Approach
In today’s rapidly evolving digital landscape, taking control of your cybersecurity strategy is more crucial than ever. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/04/embracing-the-future-mastering-your-cybersecurity-strategy-with-an-identity-driven-security-approach/
-
Microsoft Identity Web Flaw Exposes Sensitive Client Secrets and Certificates
A new vulnerability has been discovered in the Microsoft.Identity.Web NuGet package under specific conditions, potentially exposing sensitive information such as client secrets and certificate details in service logs. The flaw, identified as CVE-2025-32016, has been rated as moderate, prompting developers to urgently address the issue to prevent unintended data exposure. Overview of the Vulnerability: The vulnerability…
-
Innovations in Managing Cloud Machine Identities
Can Innovations in Machine Identity Management Reshape Cloud Security? Cloud technology has transformed the way we work, store data, and build software, revolutionizing various industries from vending to mobile automation. Nevertheless, this digital shift brings forth novel cybersecurity challenges. One particularly important aspect often overlooked is the management of Non-Human Identities (NHIs). So, what exactly……
-
Scattered Spider Launches Sophisticated Attacks to Steal Login Credentials and MFA Tokens
The cyber threat landscape has witnessed remarkable adaptation from the notorious hacker collective known as Scattered Spider. Active since at least 2022, this group has been consistently refining its strategies for system compromise, data exfiltration, and identity theft. Silent Push analysts have tracked the evolution of Scattered Spider’s tactics, techniques, and procedures (TTPs) through early…
-
AI agents raise stakes in identity and access management
IT vendors roll out fresh tools to take on identity and access management for AI agents as enterprises deploy them internally and battle malicious ones externally. First seen on techtarget.com Jump to article: www.techtarget.com/searchitoperations/news/366622025/AI-agents-raise-stakes-in-identity-and-access-management
-
Solving the Identity Crisis: Okta Redefines Security in a Machine-Led World
Okta is stepping forward with its boldest platform evolution yet, aiming to unify identity across human and machine actors, and extend zero-trust all the way from cloud to on-premises. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/04/solving-the-identity-crisis-okta-redefines-security-in-a-machine-led-world/
-
Tailscale Raises $160M to Scale AI and Enterprise Use
Zero Trust Network Access Firm Plans to Enhance Platform and Grow Revenue Faster. Tailscale has landed $160 million in Series C funding to scale its platform and meet growing demand from AI and enterprise firms. The networking company will invest in engineering to support multi-cloud and identity-based networking features. First seen on govinfosecurity.com Jump to…
-
2025 SC Awards Finalists: Best Identity Management Solution
Tags: identityFirst seen on scworld.com Jump to article: www.scworld.com/news/2025-sc-awards-finalists-best-identity-management-solution