Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
1,739 matching stories — in Identity & Access Management — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
“A threat actor has to be lucky only once. But a security professional defending a financial organization has to be lucky every single time.” Samitha Amarasiri, Simeio Managing Director. That asymmetry captures the security stakes in an industry where the 2026 RSA ID IQ Report found that 72% of organizations suffered identity-related breaches over the […] The post Closing the Identity Risk Gap in Financial Services appeared first on Simeio.
SaaS integrations often stay connected long after the original rollout, supplier project or CRM upgrade has finished. Many senior leadership teams only revisit those permissions once suspicious activity forces an investigation and customer confidence has already started taking a hit. The Salesloft Drift breach exposed how attackers can abuse trusted cloud access without breaking into Salesforce itself. Instead, attackers used compromised OAuth tokens, which work like digital permission keys, to
JadePuffer is what the security firm Sysdig calls the first ransomware attack run start to finish by an AI agent, with no human directing it. The agent broke into a server, stole credentials, spread through the network and locked a company's database on its own.
Non-human identities have quietly become the most prevalent identity type in enterprise environments. Yet the security infrastructure built to manage identity was designed for people, not machines.  The result is an attack surface that grows with every new integration, AI workflow, and automated pipeline—one that existing identity programs were never designed to govern. Secrets management, including token […]The post 6 principles for securing non-human identities (NHIs) appeared first
Last year, Aflac was swept into a wave of attacks that put the insurance industry on notice. Last week, Aflac disclosed another breach, this time involving its Japan subsidiary. The reported exposure includes policy information, personal data, and bank account information affecting millions of customers. We do not yet know the precise entry point in this new incident. It would be irresponsible to claim otherwise. But we do know the larger lesson.
Agentic AI is not slowing down, and neither is the sprawl that comes with it. At Radiant Logic, this is the thesis we keep coming back to. Trustworthy autonomous action starts with trustworthy identity data. Unify it, observe it, act on it. The post What Is Agentic AI Sprawl? appeared first on Radiant Logic | Unify, Observe, and Act on ALL Identity Data.
Executive Summary TeamPCP is a financially motivated cybercriminal group that emerged in late 2025 and rapidly evolved into a significant threat targeting cloud-native environments and software supply chains. Unlike traditional ransomware groups that primarily rely on network intrusions and encryption, TeamPCP focuses on compromising software development ecosystems, cloud infrastructure, and developer environments to maximize downstream […]
In June 2026, France’s digital affairs directorate, DINUM, confirmed a security incident involving Tchap, the French government’s messaging platform. The story was quickly picked up by cybersecurity media, with many headlines focusing on the fact that an encrypted government messenger had been breached.
Adnovum has launched an Entrepreneur in Residence (EiR) Program in collaboration with the Trust Valley initiative powered by the EPFL Innovation Park Foundation. The program aims to foster collaboration between Adnovum and innovative technology companies and to accelerate the development of next-generation digital and cybersecurity services.
Your Summer Holiday Has More Security Checks Than You Think josh.pearson@t… Tue, 07/07/2026 - 07:45 You book a plane ticket, breeze through the e-gate, connect to airport Wi-Fi, check into the hotel, and once at your destination, you end up sipping a cocktail by the pool while checking out your bank account online. It all feels effortless. Travel today is a carefully orchestrated digital experience, with most of the friction removed from the customer journey. What most people never see is the se
C1 Bridge extends AI Access Management to the MCP servers that run inside private networks, with no inbound firewall rules and nothing exposed to the internet.
An illicit consent grant abuses OAuth 2.0's delegated authorization model: instead of stealing who you are, the attacker steals what you can do. There is no software bug to patch, and the attack sails past MFA because it intercepts authorization, not authentication. This post breaks down why consent phishing works and evades detection, walks through the three-move attack chain from lure to token, and dissects the CoPhish case study that weaponizes Microsoft Copilot Studio — then shows how SlashI
An illicit consent grant abuses OAuth 2.0's delegated authorization model: instead of stealing who you are, the attacker steals what you can do. There is no software bug to patch, and the attack sails past MFA because it intercepts authorization, not authentication. This post breaks down why consent phishing works and evades detection, walks through the three-move attack chain from lure to token, and dissects the CoPhish case study that weaponizes Microsoft Copilot Studio — then shows how SlashI
It used to take a hacker to leak your data. That is no longer true. Barbara Teruggi (Allianz Technology) and Johannes Keienburg (Cakewalk) on zero trust for AI agents, default-deny access, and why no identity should complete a full process alone.
Privileged Access Management: A Critical Layer of Identity Security Most breaches do not begin with highly sophisticated attacks. Instead, they often start when a threat actor gains access to an administrative (admin) account. From there, the attacker can move laterally, escalate privileges, and expand access across the environment – causing damage that can take months […] The post Control Privileged Accounts with Privileged Access Management (PAM) appeared first on CyberFOX | Cybersecurit
Microsoft is making a change to Entra ID SSPR that is operationally correct: starting September 7, 2026, only explicitly registered authentication methods will satisfy SSPR verification. Phone numbers imported from HR, directory contact fields that were never enrolled as recovery methods, none of those count after the deadline. That is the right call. For organizations with coverage gaps, the first signal will be a help desk surge on or after September 7. But the change does not fix the governan
The digital economy is moving faster than ever, and with it comes a massive, urgent responsibility to secure the infrastructure behind it. This was the central theme at the recent, prestigious Digital Trust Thailand 2026 conference, hosted by the Electronic Transactions Development Agency (ETDA) at the Grand Prestige Centre in Bangkok, Thailand. As businesses and […] The post Securing the Future: Highlights from Digital Trust Thailand 2026 appeared first on Securemetric.
We are excited to announce that Keycloak now provides experimental support for the OpenID Shared Signals Framework 1.0 specification, available from today in the nightly release. This allows Keycloak to act as a Shared Signals Transmitter, pushing signed Security Event Tokens (SETs) about identity-relevant events to any subscribed Receiver, using a standardised wire format defined by the OpenID Foundation. This closes a long-standing gap. When you revoke a user’s session in Keycloak today,
Why The Hong Kong Securities and Futures Commission's AI Cyberattack Warning Demands Architectural Change andrew.gertz@t… Thu, 07/02/2026 - 16:23 Learn why the Hong Kong SFC’s AI cyberattack warning signals a shift in cybersecurity, and how firms can strengthen identity, data, and application-layer controls. Compliance Application Encryption Richard Chiu | Sales Engineering Manager for Hong Kong More About This Author > In view of the increasing number of incidents involving AI models, the Ho
Ariège Pyrenees Healthcare Group Deployment of the new European eIDAS-compliant professional smart card, significantly strengthening security while enhancing the user experience. Get a demo Contact Us Given this context, cyberelements evolution allows us to guarantee compliance without compromising on user experience or the productivity of healthcare professionals. Security cannot undermine the practice of healthcare delivery. […] The post Ariège Pyrenees Healthcare Group appeared first on
Bièvre Isere Regional Authority Secure identity management to accelerate employee onboarding Get a Demo Contact Us Challenges: > Streamline and simplify new employee onboarding processes> Maintain strict and secure access control for applications Solution : > cyberelements Identity Benefits: > Accelerated new employee onboarding> Significant time savings for the IT department> Strengthened security standards With […] The post Bièvre Isère Regional Authority appeared
Metz Jury Public Mental Health Service Elevating access management security while optimizing user experience Get a Demo Contact Us Challenges: > Address the challenges of the ambulatory care shift with secure remote access to electronic patient records> Reduce IT security exposure by implementing a Zero Trust strategy> Optimize user experience while simplifying IT operations for […] The post Metz Jury Public Mental Health Service appeared first on cyberelements.
The Canvas incident is over. The question it raised is not. Every institution that experienced the disruption, or watched a peer navigate it, now has the same frame of reference: this is what the gap costs.
The data your organisation encrypts today can be stolen today and decrypted later. It is an uncomfortable idea, and it is the reason post-quantum cryptography belongs on your plans now rather than later. Asymmetric cryptography, the RSA and elliptic curve (ECC) maths behind digital certificates, passkeys and the secure channels protecting your traffic, is safe […] The post Post-quantum cryptography: what it means for your credentials appeared first on Intercede.
Check kiting has been around about as long as checks themselves. And despite everything the industry has done – AI-powered monitoring, real-time payment rails, smarter onboarding controls – it’s still showing up in fraud queues at banks, credit unions and fintechs. If you’re on a risk or fraud team, understanding how this scheme works and why it keeps working is foundational to building defenses that actually hold.
At Devolutions, AI is encouraged because we believe in the time and productivity gains it delivers. Its use is guided by leadership and by our new AI team. To kick off the conversation, we’re launching an AI survey today, with a prize to be won.
In the Syteca 7.24 release, our team focused on making privileged access easier to operate in real environments. The update improves how teams manage credentials, helps verify password health, secures service accounts, and enables Linux-native workflows. Read on to learn about each improvement in detail! Why Syteca 7.24 matters: Overview of 7.24 improvements Syteca 7.24 […]
Data misuse is one of the hardest‑to‑detect threats for modern organizations: authorized users access information legitimately and then use it for unauthorized or harmful purposes. Misuse of information can result in data breaches, reputational damage, regulatory fines, and loss of competitive advantage.  Read this article to get four actionable measures for detecting and preventing misuse […]
