Tag: identity security
36 articles
AI Security Lags Behind Business Ambition
Most organizations are stuck in a security rut, with 54% still struggling to secure autonomous AI agents, reveals the SailPoint "Horizons of Identity Security" report. They're racing to adopt AI, but their security controls are stuck in the slow lane.
Cybersecurity Shifts to Continuous Risk Response
The future of cybersecurity lies in agility, not data overload - it's about harnessing the power of your security data to respond to threats in real-time. Winning security programs will be those that can swiftly route, reshape, and reuse data to stay ahead of emerging risks.
Microsoft Bolsters Entra ID Defenses Against Script Injection Attacks
Microsoft is stepping up Entra ID security by blocking external script injections, starting mid-October 2026, to shield users from potential threats during sign-ins. This move will ensure only trusted scripts from Microsoft's content delivery network can run during authentication.
AI Agents Redefine Lateral Movement Threats in Cybersecurity
Meet the game-changer in cybersecurity: AI agents that can autonomously navigate and exploit access, turning a simple permission issue into a complex threat landscape. Traditional risk assessments focused on access alone, but with agentic AI, the real concern is what paths an autonomous system can discover and assemble with the access it already holds.
Security Teams Struggle to Connect Dots in Cross-Environment Attacks
Attacks are getting more complex, with 43% of incidents spreading across four or more environments - and in some cases, as many as eight. Security teams struggle to piece together these cross-environment attacks, making it crucial to connect the dots between disparate signals.
AI Automates Credential Theft, Threatens Identity Security
In under six hours, a single operation compromised thousands of third-party credentials, highlighting the alarming speed and efficiency of AI-powered credential theft. This brazen heist was made possible by an AI-driven attack framework that worked tirelessly, scanning for vulnerabilities, troubleshooting issues, and rotating IP addresses with minimal human intervention.
AI Agents Often Exceed Intended Access Privileges
There's a shocking disconnect between organizations' confidence in their AI security and the reality: while 94% of organizations believe their AI agents have only the access they need, a mere 33% actually have the least privileged access in place. This gap isn't about awareness, but about turning policy into practice.
AI Agents Expose New Attack Surface for Organizations
The risks associated with agentic AI and machine identities are huge, with former CISA head Matt Hartman warning that these AI agents can create new vulnerabilities and become prime targets for attackers. Organizations must now treat every AI agent as a privileged identity with access to sensitive systems and data.
AI Compresses Identity Attacks, Forces Device Trust Reassessment
Identity security is buckling under the strain of increasingly sophisticated threats, with stolen credentials remaining a top vulnerability - a whopping 44.7% of breaches involve compromised login details. AI is now compressing the time and effort attackers need to launch identity attacks, forcing a urgent reevaluation of device trust.
Okta Bolsters Identity Security with Permiso Acquisition
Okta is taking identity security to the next level with its acquisition of Permiso Security, bringing together cutting-edge threat detection and response capabilities with its existing identity stack to provide unparalleled protection. This game-changing move will enable Okta to spot and respond to risks that emerge after users, machines, or AI-driven agents have authenticated.
AI Agents Expose Security Risks with Broad Permissions
Modern AI agents are operating like improvisational actors, trying actions, learning, and adapting at scale - but this unpredictability can turn every unanticipated step into a security risk when paired with broad permissions. Traditional security models are no match for these autonomous agents, which are outpacing our ability to keep them secure.
Synthetic Identity Fraud Targets Machine Identities
Imagine a new kind of identity theft where attackers create fake machine identities from scratch, blending real and invented attributes to fly under the radar. These fabricated Non-Human Identities can go undetected, allowing cybercriminals to wreak havoc without triggering the usual alerts that catch stolen accounts.
NSA, CISA Warn Federal Agencies of Identity Security Risks
The NSA and CISA are sounding the alarm: identity security risks are now the frontline in federal cybersecurity, with Active Directory and Entra ID being prime targets for cyber attackers. Recent incidents show that nearly 75% of major federal cyber breaches in the last five years involved compromised identities.
AI Agents Expose Identity Security Gap
The alarming truth is that security systems, designed with people in mind, are failing to protect against AI agents - and the consequences are stark. A single compromised machine identity can become a gateway to a vast array of sensitive information, as a recent breach involving an OAuth token and hundreds of organizations painfully illustrates.
Identity Crime Incidents Multiply for Victims, ITRC Data Reveals
The alarming rise in identity crime incidents is not just about the numbers, but also the disturbing pattern of recurrence, with nearly 26% of victims experiencing multiple concurrent incidents, according to the Identity Theft Resource Center's 2026 Trends in Identity Report. This growing multi-layered crisis sees single compromises snowballing into additional incidents across accounts and institutions.
Strengthening Active Directory Password Rules Without Frustrating Users
Want to boost your Active Directory password security without driving users crazy? Ditch outdated complexity rules and switch to passphrases - longer, multi-word passwords that are easier to remember and harder for hackers to crack.
Device Security Must Complement Identity to Thwart Modern Threats
Authentication is no longer enough to guarantee security - even with multi-factor authentication in place, phishing kits can capture session tokens, allowing attackers to bypass security checks undetected. As a result, device security must step up to complement identity and prevent modern threats.
AI Adoption Exposes Identity Security Blind Spots
As organizations rapidly adopt AI, they're unwittingly creating a surge in non-human identities - like AI agents and machine identities - that are outpacing their ability to manage and secure them, leaving them vulnerable to new security risks. This blind spot is exposing companies to excessive privileges, unmanaged access, and orphaned accounts, threatening their security, compliance, and operations.
AI Agents Expose Blind Spots in APAC Enterprise Security
Attackers are now targeting AI agents embedded within APAC enterprises, exploiting weaknesses in non-human identities to gain access to sensitive systems, data, and workflows. This emerging threat highlights a significant blind spot in enterprise security, one that's ripe for exploitation by malicious actors.
AI Agents Expose Organizations to Identity Security Risks
Most organizations are unwittingly rolling out AI agents that can open the door to identity security breaches, with 93% using or planning to use them for sensitive tasks like password resets and VPN access. Despite this, many admit that these agents create new vulnerabilities.
UK Workers Sell Corporate Logins, Exposing Firms to Cybercrime
One in eight UK employees at large firms have sold or know someone who has sold corporate logins in the past year, a shocking trend that puts companies at risk of cybercrime. Alarming still, many justify this risky behaviour, with senior executives being more likely to think selling credentials is acceptable.
AI Agents Expose Identity Security Gaps
Imagine an AI agent that can uncover thousands of hidden security vulnerabilities, some of which have gone undetected for nearly 30 years - and the potential risks that come with it falling into the wrong hands. A single powerful AI agent can scan for weaknesses faster and more persistently than hundreds of human hackers, highlighting a pressing need for secure deployment.
Silverfort Injects AI into Access Decisions with Fabrix Buy
With Fabrix acquisition, Silverfort supercharges access decisions with AI, aiming to revolutionize identity security by automating routine tasks and reserving human oversight for high-stakes situations. This game-changing move enables businesses to scale security efficiently, freeing up human experts to focus on critical decisions.
Microsoft Fixes Entra ID Flaw That Enabled Service Principal Takeovers
Microsoft has patched a vulnerability in Entra ID that allowed hackers to hijack service principals, potentially leading to full takeover of sensitive systems. A security researcher discovered the flaw, which stemmed from overly broad permissions in the Agent ID Administrator role.