Tag: access management
29 articles
AWS AgentCore Flaw Exposes Credentials, Enables Lateral Attacks
A single chat prompt was all it took for an external attacker to exploit a vulnerability in AWS AgentCore, extracting sensitive IMDS credentials and taking over all agents in the same account and region. This shocking security flaw highlights the potential for devastating lateral attacks with just a single exposed agent.
tenfold Bolsters Free Identity Governance Tool with New Features
tenfold just supercharged its free Identity Governance Tool, adding game-changing features like shared-content access reviews and centralized event auditing - now smaller IT teams can enjoy robust identity governance without breaking the bank! This move helps organizations ditch manual, spreadsheet-driven practices for good.
Identity Telemetry Bolsters Defense Against Escalating Threats
As organizations expand their cloud presence and connect with more external accounts, traditional identity controls - like periodic reviews and static role definitions - simply aren't enough to keep pace with escalating threats. A proactive approach requires continuous, real-time awareness that only a unified platform with identity governance and event-level telemetry can provide.
AI Agents Redefine Lateral Movement Threats in Cybersecurity
Meet the game-changer in cybersecurity: AI agents that can autonomously navigate and exploit access, turning a simple permission issue into a complex threat landscape. Traditional risk assessments focused on access alone, but with agentic AI, the real concern is what paths an autonomous system can discover and assemble with the access it already holds.
Identity Infrastructure Exposes Hidden Risks in Active Directory
In today's cybersecurity landscape, identity has become the new perimeter - and Active Directory and Entra ID are the control centers that keep it all connected, making them prime targets for attackers. Compromising these identity infrastructures can give hackers access to an entire environment, not just a single system.
Identity Visibility Emerges as Critical IAM Challenge
In today's digital landscape, identity visibility has become a pressing challenge for modern enterprises, requiring a clear view of every identity, its access capabilities, and actual usage. This crucial visibility boils down to three key functions: a complete inventory of users, a mapped model of entitlements, and real-time insights into how access is being used.
Microsoft 365 Sharing Risks Exposed in Enterprise Environments
Did you know that 61% of security leaders admit that access to shared files in Microsoft 365 often stays active longer than it should, leaving sensitive information vulnerable? This alarming trend highlights the hidden risks of easy cloud collaboration.
Security Leaders Warn of Evolving Insider Threats
Insiders pose a uniquely potent threat because they already have the keys to the kingdom - and traditional defenses often miss the mark by relying on alerts that don't account for the devastating impact of trusted accounts gone rogue. To stay ahead, defenders must validate their readiness against insider threats by asking tough questions about access, escalation, and lateral movement.
AI Agents Often Exceed Intended Access Privileges
There's a shocking disconnect between organizations' confidence in their AI security and the reality: while 94% of organizations believe their AI agents have only the access they need, a mere 33% actually have the least privileged access in place. This gap isn't about awareness, but about turning policy into practice.
IAM Compliance Requires Verified Enforcement
To truly achieve IAM compliance, it's not enough to just have policies in place - you need to prove that they're being enforced. The real challenge lies in bridging the gap between policy intent and actual runtime execution, where compliance failures and unmanaged access often hide.
AI Agents Expose Security Risks with Broad Permissions
Modern AI agents are operating like improvisational actors, trying actions, learning, and adapting at scale - but this unpredictability can turn every unanticipated step into a security risk when paired with broad permissions. Traditional security models are no match for these autonomous agents, which are outpacing our ability to keep them secure.
Security Teams Must Adapt as AI Agents Disrupt Traditional Playbook
The era of predictable enterprise security is over: AI agents are autonomously accessing production data, forcing security teams to rethink everything they thought they knew. With AI agents blurring the lines between sanctioned and unsanctioned activity, traditional security playbooks are no longer effective.
Identity Lifecycle Management Struggles to Govern AI Agents
Traditional identity lifecycle management systems were designed with humans in mind, relying on HR data to dictate access and permissions. But with AI agents on the rise, this approach is no longer enough.
Hidden AI Agents Expose Access Risks in Corporate Networks
Can your security team instantly identify who authorized an autonomous AI agent to access your company's core intellectual property? The uncomfortable truth is that most enterprises have no clear answer, leaving them vulnerable to hidden AI access risks.
Identity Exposures Form Highways for Cyber Attacks
A single compromised identity can become a superhighway for cyber attacks, giving hackers access to nearly every critical workload a business relies on - as seen in a recent incident where a cached AWS access key on one Windows machine put 98% of the company's cloud environment at risk. Identity has become the ultimate attack path, carrying with it a multitude of permissions just waiting to be exploited.
Silverfort Injects AI into Access Decisions with Fabrix Buy
With Fabrix acquisition, Silverfort supercharges access decisions with AI, aiming to revolutionize identity security by automating routine tasks and reserving human oversight for high-stakes situations. This game-changing move enables businesses to scale security efficiently, freeing up human experts to focus on critical decisions.
Microsoft Abruptly Bans Top Open-Source Developers
Imagine being a leading open-source developer, only to be suddenly and silently locked out of your Microsoft developer account, with no warning, no emails, and no human contact - just automated blocks and a lengthy appeal wait. This is what recently happened to the creators of VeraCrypt and WireGuard, leaving their critical projects in limbo.
Identity Fragmentation Exposes Growing Enterprise Security Risks
As organizations scale, identities are scattering across apps, teams, and systems, creating a blind spot in centralized view and giving rise to what The Hacker News calls Identity Dark Matter. This fragmented state of modern enterprise identity is pushing IAM to the breaking point, exposing growing security risks that demand attention.
Hackers Target Asia Pacific with URL-Based Threats
In Asia Pacific, hackers are ditching traditional tactics and using URL-based threats to gain easy access to your digital life - with just one click, your security can be compromised. This emerging threat landscape is redefining how we think about online identity, access, and trust.
payment data breach: Stunning Alarming Risk Exposed
About 180,000 people had names and payment details left exposed — putting them at heightened risk of fraud and identity theft; here’s what to do now to protect yourself and why companies must tighten their defenses.
zero trust Must-Have: Europe’s Best Security Playbook
Across Europe, zero trust has moved from IT theory to a regulatory expectation—policymakers now expect identity-centric controls, measurable resilience and risk reporting, so organizations must re-architect defenses or accept growing exposure. Start pragmatically: protect your highest-value assets with IAM, MFA and segmentation, measure risk reduction, and build privacy-preserving telemetry as you go.
cloud collaboration: Must-Have Best Practices to Avoid Risk
Cloud collaboration makes teamwork effortless — and oversharing dangerously easy; learn practical, friendly best practices to keep files moving fast while cutting exposure, from short-lived links and MFA to data stewardship and automated audits.
Google Threat Intelligence: Exclusive Risky 393-Day Breach
Google says China-linked attackers have quietly lived inside many enterprise networks since March — an average of 393 days — installing persistent backdoors and exfiltrating sensitive IP. The takeaway: tighten access, boost detection, and treat long dwell times as an urgent business and security priority.
AI agents: Must-Have Best Practices for Security
You likely have forgotten service accounts, API keys, and AI agents running everywhere that quietly widen your attack surface — but with a clear inventory, short‑lived credentials, and assigned ownership you can start regaining control. Begin small: catalog a critical app, enforce least privilege, and measure detection and remediation to prove the approach scales.