Tag: identity
-
Cannabis company Stiiizy says hackers accessed customers’ ID documents
A ransomware gang took credit for the breach, claiming to have stolen over 400,000 government-issued identity documents from customers. First seen on techcrunch.com Jump to article: techcrunch.com/2025/01/10/cannabis-company-stiiizy-says-hackers-accessed-customers-id-documents/
-
OWASP Top 10 Non-Human Identity Risks for 2025: What You Need to Know
Learn about OWASP’s newest focus on Non-Human Identities and how to mitigate risks like secret leakage, overprivileged NHIs, and insecure authentication with GitGuardian. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/01/owasp-top-10-non-human-identity-risks-for-2025-what-you-need-to-know/
-
Digital identity verification will have a breakout year in 2025
Tags: identityFirst seen on scworld.com Jump to article: www.scworld.com/perspective/digital-identity-verification-will-have-a-breakout-year-in-2025
-
FCC moves to tighten industry reporting rules for robocalls
The new rules are designed to ensure voice service providers are actually confirming the identity of callers using their network. First seen on cyberscoop.com Jump to article: cyberscoop.com/fcc-moves-to-tighten-industry-reporting-rules-for-robocalls/
-
APT32 Hacker Group Attacking Cybersecurity Professionals Poisoning GitHub
The malicious Southeast Asian APT group known as OceanLotus (APT32) has been implicated in a sophisticated attack that compromises the privacy of cybersecurity professionals. A recent investigation by the ThreatBook Research and Response Team revealed that a popular privilege escalation tool utilized by cybersecurity experts had been backdoored, leading to significant data breaches and identity…
-
What Makes You”¦ You? A Philosophical Take on Non-Human Identity
6 min readFrom DNA to data, explore the unanswered questions of identity and the challenges of securing a non-human world. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/01/what-makes-you-you-a-philosophical-take-on-non-human-identity/
-
Context matters: Why observability is fundamental to identity protection
Tags: identityFirst seen on scworld.com Jump to article: www.scworld.com/perspective/context-matters-why-observability-is-fundamental-to-identity-protection
-
Washington State Filed Lawsuit Against T-Mobile Massive Data Breach
Washington State Attorney General Bob Ferguson filed a consumer protection lawsuit against T-Mobile for its alleged failure to secure sensitive personal information of over 2 million residents. This lawsuit comes in the wake of a massive data breach that exposed the personal details of Washingtonians, putting them at heightened risk of fraud and identity theft.…
-
The biggest data breach fines, penalties, and settlements so far
Tags: access, apache, attack, breach, business, china, ciso, communications, compliance, control, credentials, credit-card, cyberattack, cybercrime, cybersecurity, data, data-breach, email, finance, flaw, framework, GDPR, google, hacker, Hardware, identity, Internet, law, leak, linkedin, microsoft, mobile, monitoring, network, office, phone, privacy, regulation, risk, service, software, technology, tool, training, update, vulnerabilitySizable fines assessed for data breaches in recent years suggest that regulators are getting more serious about cracking down on organizations that don’t properly protect consumer data.Hit with a $ 1.3 billion fine for unlawfully transferring personal data from the European Union to the US, Meta tops the list of recent big-ticket sanctions, with one…
-
The Role of IAM in Securing Cloud Transactions
Why Is Identity Access Management (IAM) Crucial in Cloud Security? Have you ever thought about how crucial Identity Access Management (IAM) is when it comes to cloud security? IAM is not just about managing human identities but also about dealing with non-human identities (NHIs) and their secret security management. As a data management specialist and……
-
Identity Security to Become a Focus in 2025, Experts Say
Tags: identityFirst seen on scworld.com Jump to article: www.scworld.com/brief/identity-security-to-become-a-focus-in-2025-experts-say
-
Part 15: Function Type Categories
On Detection: Tactical to Functional Seven Ways to View API Functions Introduction Welcome back to Part 15 of the On Detection: Tactical to Functional blog series. I wrote this article to serve as a resource for those attempting to create tool graphs to describe the capabilities of the attacker tools or malware samples they encounter.…
-
ADFS”Š”, “ŠLiving in the Legacy of DRS
ADFS”Š”, “ŠLiving in the Legacy of DRS It’s no secret that Microsoft have been trying to move customers away from ADFS for a while. Short of slapping a “deprecated” label on it, every bit of documentation I come across eventually explains why Entra ID should now be used in place of ADFS. And yet”¦ we still encounter…
-
1Password Acquires Trelica to Boost SaaS Access Management
Unified Extended Access Management Platform Gains Key Integrations and Workflows. The addition of Trelica allows 1Password to accelerate its extended access management roadmap by 18 months. The acquisition emphasizes simplicity for end users while unifying SaaS visibility, device management and identity security under a single solution. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/1password-acquires-trelica-to-boost-saas-access-management-a-27229
-
Saudi Arabia calls for humanitarian AI after tightening screws on rights protesters
Oppressive state wants global digital identity system at the heart of all AI, to make it trustworthy and prevent it being used for ‘unauthorised surveillance’ First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366617701/Saudi-Arabia-calls-for-humanitarian-AI-after-tightening-screws-on-rights-protesters
-
Malicious Browser Extensions are the Next Frontier for Identity Attacks
A recent campaign targeting browser extensions illustrates that they are the next frontier in identity attacks. Learn more about these attacks from LayerX Security and how to receive a free extension audit. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/malicious-browser-extensions-are-the-next-frontier-for-identity-attacks/
-
Identity Security in 2025: Defending against AI-driven cyberthreats and machine identity exploits
First seen on scworld.com Jump to article: www.scworld.com/feature/identity-security-in-2025-defending-against-ai-driven-cyber-threats-and-machine-identity-exploits
-
Addressing Blind Spots in Identity Security for 2025
Join us for our first industry webinar of 2025: Beyond the Perimeter: Addressing Blind Spots in Identity Security for 2025. Our founder Simon Moffatt will be in conversation with Silverfort CEO Hed Kovetz, where they’ll be chatting about the rise and need for identity security – what it is, how it works and how to…
-
12 cybersecurity resolutions for 2025
Tags: advisory, ai, api, attack, awareness, breach, business, ceo, chatgpt, china, ciso, communications, control, crowdstrike, cyber, cyberattack, cybersecurity, data, data-breach, deep-fake, defense, detection, email, identity, insurance, jobs, law, malicious, phishing, ransomware, risk, risk-assessment, risk-management, strategy, supply-chain, technology, threat, tool, training, vulnerabilityAs cyber threats continue to evolve, CISOs must prepare for an increasingly complex threat landscape. From dealing with AI-driven attacks to managing changing regulatory requirements, it’s clear that 2025 will be another big year for CISOs.But staying ahead requires more than just implementing the next cutting-edge set of tools or technologies. It demands a shift…
-
Feel Supported by Advanced Machine Identity Management
Why Does Machine Identity Management Matter? Why should advanced machine identity management be a key concern for CISOs? With rapid technological advancements and the increasing dependence on cloud environments, businesses are confronted with a new array of security challenges. One such critical challenge is the safe management of Non-Human Identities (NHIs) along with their corresponding……
-
Unlocking the Potential of Machine Identity Management
The Untapped Potential of Machine Identity Management Are you aligning your cybersecurity efforts with the contemporary needs and trends? Organizations often overlook the significance and strategic depth of Non-Human Identities (NHIs) and Secrets Security Management. This lapse can expose businesses, particularly those operating in the cloud, to potential security breaches and data leaks. The Concept……
-
Confidently Secure: Leveraging PAM for Enhanced Protections
Why is Harnessing Non-Human Identities Central to Your Cybersecurity Strategy? In the realm of information security, managing identities whether human or machine is critical. This attention escalates further when you delve into the realm of Non-Human Identity (NHI) management. The importance can easily get obscured in the vast sphere of cybersecurity, but why… First seen…
-
Microsoft pushes identity management feature for Azure via Entra
First seen on scworld.com Jump to article: www.scworld.com/news/microsoft-pushes-identity-management-feature-for-azure-via-entra
-
Microsoft, Ping, Okta Dominate Access Management Gartner MQ
Access Management Leaders Remain Unchanged as Customer Identity Cases Proliferate. Advances in customer identity around better user experience, strong authentication, and centralized identity processes have driven rapid growth in the access management market. The space by grew 17.6% to $5.85 billion in 2023 as organizations increasing look to replace homegrown CIAM solutions. First seen on…
-
Identity-security predictions for 2025
Tags: identityFirst seen on scworld.com Jump to article: www.scworld.com/resource/identity-security-predictions-for-2025
-
Online gift card store exposed hundreds of thousands of people’s identity documents
The gift card store secured the public cloud storage server containing customer ID documents, which was not protected with a password. First seen on techcrunch.com Jump to article: techcrunch.com/2025/01/03/online-gift-card-store-exposed-hundreds-of-thousands-of-peoples-identity-documents/