Install
Identity & Access
Authentication, MFA, SSO, PAM, and protecting human & service accounts.
- 27 Tracked terms
- Last 30 days Feed window
What this topic collects on
An article joins this feed when it matches these terms. Each one is also a search of its own.
Related topics
Latest in Identity & Access
Why I Added a Go Step-Up Risk Score Gate for Password and Email Changes — 3 Lessons
53+ min ago (682+ words) The page that wakes an on-call engineer is rarely the password form itself. It is usually a tenant support ticket followed by a suspicious email-change event: a property manager is locked out, a new address now owns the account, and…...
Pass Revelator: An AI-Driven Hacking Tool for Lost and Stolen Account
11+ hour, 27+ min ago (572+ words) Vocal Pass Revelator: An AI-Driven Hacking Tool for Lost and Stolen Account How is an AI tool helping police in their investigations? While much of the media coverage surrounding the French technology LIFEE has centered on the personal journey of…...
How to Set Up Auth0 Organizations (SSO, Branding & Invitations)
1+ day, 1+ hour ago (298+ words) Stop Building Multi-Tenant Auth from Scratch. Use This Instead. Building a B2B SaaS application requires a complex multi-tenant infrastructure. In this technical walkthrough, Shreya Gupta and Lily Wisecarver demonstrate how to use Auth0 Organizations to effortlessly manage identity workflows for your business…...
Identity resilience in the age of advanced AI attacks
1+ day, 59+ min ago (234+ words) Tomer Bar, Associate VP of Security Research at Semperis | Published 14 Sept 2026 GUEST OPINION: Identity Resilience: A Holistic Strategy Modern enterprises rarely operate on a single ecosystem. A resilient defence requires a clear understanding of the entire identity environment and how…...
Attackers Use Passkey Phishing to Hijack Microsoft Cloud Accounts and Exfiltrate Data
1+ day, 10+ hour ago (25+ words) An engineering breakdown of AitM authentication relays, Device Code phishing, post-compromise MFA registration …...
This Tiny Fingerprint Key Unlocks Linux, Approves SSH and AI Agents
2+ day, 13+ hour ago (1767+ words) A laptop fingerprint sensor unlocks the laptop and usually stops there. Immurok wants to do quite a bit more than that. It is a tiny wireless box that can unlock your desktop session, approve a sudo command, authenticate via polkit,…...
Cognito With the Safety Off: MFA Disabled, Advanced Security Disabled
1+ day, 16+ hour ago (722+ words) ✓ Human-authored analysis; AI used for formatting and proofreading. A Cognito user pool is an identity perimeter. The pool authenticates customers, issues JWTs the application trusts, and brokers federation to social identity providers. Whatever else the application does for security such…...
The next decade of cyber resilience will depend on skills and awareness, says Kaspersky APAC chief
1+ day, 16+ hour ago (251+ words) As Bangladesh moves more of its economy and public services online, cybersecurity is becoming central to the country’s digital ambitions. This creates commercial opportunities for global cybersecurity companies, while testing whether Bangladesh can build the skills, institutions, and policies needed…...
The Chain That Opened the Crisis: How SonicWall SMA1000’s First Zero-Day Turned VPN Appliances Into MFA Harvesting Machines
1+ day, 19+ hour ago (129+ words) CVE-2026-15409 chained SSRF and code injection to achieve root on SMA1000 appliances, stealing TOTP MFA seeds and turning the VPN gateway into a persistent surveillance platform. CISA flagged it for ransomware exploitation. We covered the second chain but never the first…...
One Click Away from Account Compromise: What a Recent Microsoft 365 Phishing Campaign Teaches Us
2+ day, 8+ hour ago (352+ words) Phishing is still one of the simplest ways to target an employee. A message does not always look …...