Session lifetime is a security control, not a UX setting
A Zoom zero-click RCE went from discovery to working exploit in a day. The exploit took one day; your sessions last longer than that.
Vendor news
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
1,737 matching stories — in Identity & Access Management — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Identity Icons Awards 2026: Nominate your Identity Security heroes
If you ask me for my customer story of the year, I’d start with the team that stopped Mythos inside a Project Glasswing member’s environment. AI is everywhere—from the headlines to the boardroom. Organizations know they need to secure AI agents and defend against AI-powered attacks. What’s less clear is how to do it effectively. Early successes are beginning to emerge, and I’m eager to […]The post Identity Icons Awards 2026: Nominate your Identity Security heroes appeared first on Si
Running the WorkOS API locally
WorkOS Emulate runs the WorkOS API on your own machine, so your tests can seed real data, drive full login flows, and force failures without touching prod.
Best Azure monitoring tools: Compare the leading solutions
Microsoft Azure has become one of the most widely adopted cloud platforms for running business applications, databases, containers, analytics workloads, and enterprise services. Modern Azure environments now extend far beyond virtual machines, encompassing services such as Azure Kubernetes Service (AKS), Azure SQL Database, Azure Functions, storage... The post Best Azure monitoring tools: Compare the leading solutions appeared first on ManageEngine Blog.
What it's like to join WorkOS as a product designer
What it's actually like to join WorkOS as a product designer: transparent context by default, and AI as everyday design tooling.
Digital Identity Moves to the CxO Agenda: What’s New in the Gartner® Hype Cycle™ for Digital Identity, 2026
We’re proud to share that Radiant Logic is named a Sample Vendor in three categories in this year’s report: Identity Visibility and Intelligence Platforms, AI for Access Administration, and SCIM. In fact, the same recognition was made last year. More on that below, but first, let’s look at what changed. The post Digital Identity Moves to the CxO Agenda: What’s New in the Gartner® Hype Cycle™ for Digital Identity, 2026 appeared first on Radiant Logic | Unify, Observe, and Act on ALL Identity Data
Govern AI & Non-Human Identities in Enterprise | Saviynt
Traditionally, identity governance has been human-centric. Policies and controls were built around their behaviors and the concepts of “joiners, movers, and leavers.”
Create Self-Service IT Reports with Custom Query Builder
Answering critical audit questions, like identifying which users have access to specific applications on their laptops, often means navigating multiple […] The post Create Self-Service IT Reports with Custom Query Builder appeared first on JumpCloud.
Delegated authorization: Why acting on behalf of someone else is not a role
Delegated authorization explained. Why modeling on-behalf-of access as a role loses the subject, the approver and the expiry. Covers the RFC 8693 act claim, delegation versus impersonation, AuthZEN and COAZ, multi-party policy conditions, revocation before expiry, and audit lineage for delegated actions.
Trusted Identity. Anywhere. At any scale. Now Live
The new intercede.com is live. A sharper look, faster pages, and an interactive homepage that shows where your organisation sits on the authentication scale, and what fits. Here is a quick tour. A new look for the digital identity experts The first thing you will notice is the design. The new site carries the dark […] The post Trusted Identity. Anywhere. At any scale. Now Live appeared first on Intercede.
10 Best Companies to Help You Get ISO 27001 Certified
Compare ISO 27001 certification companies and tools to find the right solution for audit prep, automation, and support. The post 10 Best Companies to Help You Get ISO 27001 Certified appeared first on Scytale.
Detection Is Not Coordination: What Small Utilities Still Need After Water Watch
The Water Watch Center gives small water utilities no-cost cyber detection. The next challenge is funding resilient response coordination.
Advisory Solutions reaches 1Password Certified Partner status
The launch of 1Password Enterprise Password Manager – MSP Edition marked a critical step in 1Password’s mission to support our Managed Service Provider (MSP) partnerships. Now, we are pleased to announce that Advisory Solutions, a New York City-based MSP that works with companies worldwide, has reached the Certified Tier in the 1Password Partner program. 1Password's new Certified tier is a milestone we’ve implemented to recognize the investment and success of MSP partners who have reached 1,000
Developer secrets management that keeps delivery moving
In March 2025, attackers compromised a GitHub Action used in the development pipelines of more than 23,000 repositories. The malicious code exposed API keys, cloud credentials, SSH keys, and other tokens in workflow logs. Affected teams were advised to review their workflow runs and rotate any credentials the logs exposed.Affected organizations had to determine which credentials had been exposed, what those credentials could reach, and how to replace every one of them without halting development
MCP server vetting checklist for enterprises
Every MCP server you connect is a third party you have handed an agent a door to. Here is a practical checklist for vetting MCP servers and governing the ones you cannot fully trust.
The Authorized Table | IAM Leaders Dinner – Washington D.C | With IC Consult
The post The Authorized Table | IAM Leaders Dinner – Washington D.C | With IC Consult appeared first on PlainID.
Authorizing MCP tool calls at the gateway or inside the proxy, and what each one stops
Two ways to authorize MCP tool calls, in the request path or inside the proxy, and they stop different things. Covers in-path gateway enforcement against a pre-call hook, why denying a tool and hiding a tool are different security properties, fail closed behavior, and where both shapes stop working.
Why Your IT-Security Model Needs an Update for the Agentic Era
A sales operations analyst on your team is buried in manual data entry. The IT queue is three weeks deep. […] The post Why Your IT-Security Model Needs an Update for the Agentic Era appeared first on JumpCloud.
Full-stack observability: How to gain end-to-end visibility across modern IT environments
Applications are distributed across hybrid- and multi-cloud infrastructures. Services are containerized, ephemeral, and interdependent at a speed that documentation cannot keep up with. The number of components generating operational data has grown exponentially. Observability is the response: A way to see what is happening across the entire IT... The post Full-stack observability: How to gain end-to-end visibility across modern IT environments appeared first on ManageEngine Blog.
SOC Automation: AI-Driven Tools and Best Practices
Key Takeaways SOC automation is the practice of handing a defined security operations task to software that runs it on a stated trigger, under a rule a person wrote. It covers enrichment, deduplication, case creation, evidence collection, and a bounded set of containment actions across the alerts a security operations center receives. The pipeline is […] The post SOC Automation: AI-Driven Tools and Best Practices appeared first on Orca Security.
Agentic AI Security: Risks, Controls & Framework
Key Takeaways Agentic AI security is the practice of bounding what an autonomous AI system may do once it starts reasoning toward a goal, calling tools, reading the results, and deciding again on its own, across the APIs, data stores, and services of an enterprise environment. The unit of analysis is the plan rather than […] The post Agentic AI Security: Risks, Controls & Framework appeared first on Orca Security.
AI Agents Security: Risks and Protection Strategies
Key Takeaways Securing an AI agent means bounding what one identity can reach at the moment it acts. An application’s behavior is fixed when its code ships. An agent holds a credential, chooses its next tool at runtime, and acts between the request and the result. This article treats one agent as a security object. […] The post AI Agents Security: Risks and Protection Strategies appeared first on Orca Security.
Do Not Migrate Twice. Vishing Is Coming for Your Passkeys.
The next great cyberattack may not start with malware, a zero day, or someone furiously typing commands into a terminal. It may start with your phone ringing. “Hi, this is IT. We are completing the company’s mandatory passkey migration. Microsoft is changing its authentication requirements and your account still needs to be updated. I can walk you through it. It will only take two minutes.” That call is no longer hypothetical. Attackers are already using almost exactly this script. And they are
Certificate Discovery Tools: The Foundation of Certificate Management
Key Takeaways Quick Answer: What Is a Certificate Discovery Tool? A certificate discovery tool automatically finds and catalogs the TLS/SSL and other digital certificates deployed across an organization’s networks, servers, cloud, containers, and applications, building a live inventory used to prevent expiry outages and enforce policy. The need is well documented: Keyfactor’s research finds that […] The post Certificate Discovery Tools: The Foundation of Certificate Management
Venafi Alternative: Akeyless vs Venafi Compared for 2026
Key Takeaways Quick Answer: What Is a Venafi Alternative? A Venafi alternative is a certificate lifecycle management or machine identity platform that teams evaluate in place of Venafi, now sold as CyberArk Certificate Manager. Most look for one of two reasons: to cut the cost and operational overhead of running Venafi, or to avoid roadmap […] The post Venafi Alternative: Akeyless vs Venafi Compared for 2026 appeared first on Akeyless.
When the Attacker Doesn’t Sleep, Correlation Isn’t Enough
An autonomous agent proved something last month that was previously theoretical: credential-valid, signature-free attacks now move faster than the SOC stacks built to catch them. This is not a story about one lab, one benchmark, or one unlucky target. It is a preview of what every enterprise now has running inside its own walls in […]
Jenkins Secrets, Explained: What the Credentials Plugin Gets Wrong
Key Takeaways Jenkins’ Credentials Plugin encrypts secrets at rest, but the design is decryptable: anyone with Script Console access can run Groovy code to decrypt any stored credential, and the master key that protects everything else sits unencrypted on the filesystem. The native plugin also has no automated rotation, no audit trail of who accessed […] The post Jenkins Secrets, Explained: What the Credentials Plugin Gets Wrong appeared first on Akeyless.
Top 7 AI Governance Platforms in 2026
Compare the top AI governance platforms for 2026 and find the right solution for your AI compliance needs. The post Top 7 AI Governance Platforms in 2026 appeared first on Scytale.
Reliable Windows app patching with Iru system tray notifications
Notify Windows users when app updates are available. When your users are ready, they can allow Iru to close the app and update the application. Employees get more control over when updates land, and you spend less time chasing down unpatched devices.
Shared vs. 1-to-1 mobile devices: Which model reduces the IT support burden?
For healthcare IT teams, the choice between shared and 1-to-1 mobile devices affects much more than hardware costs.
How LinuxGuard Protects Against Agentic Attacks
When OpenAI published its account of the Hugging Face incident, what stood out was not what the agents did. It was what they found waiting for them: exposed credentials, over-permissioned service accounts, workers that could be turned into an administrator's foothold. None of it was created by an agent. It was the ordinary residue of running infrastructure at scale — the same residue most Linux estates carry today. What was new was the actor. A collective of autonomous agents, coordinating thro
Why CI Security Guidance Keeps Failing Small Utility Operators
Most critical infrastructure security guidance is built for large enterprises, not small utilities. Here is a practical framework for operators with limited staff and budget.
No robots in the gym, with Keith Hoodlet
Listen to the episode on Apple PodcastsnullListen nowListen to this episode on SpotifynullListen nowThis week on the Chasing Entropy Podcast, host Dave Lewis sits down with Keith Hoodlet, Director of Security Research at 1Password and leader of the newly formed Off-by-1 Labs. Keith’s mission? “To throw stones at glass houses, not to hear the crash necessarily, but to help people build better and more secure houses.”A villain-turned-hero origin storyAs Keith puts it, “I’ve always been really focu
AI moves faster than your controls. Here’s how to fix it.
AI tools can accelerate data exposure, compromise software supply chains and trigger risky agentic behavior. Part two of a two-part series.
When a Health System Acquires Another Hospital, Identity Governance Is the First Casualty
The deal closes in a boardroom. The governance gap opens on day one, and it does not close on its own. When two health systems combine, the announcement talks about scale, coverage, and patient outcomes. What it does not mention is that on the first day of combined operations, the acquiring organization becomes responsible for
Top tips: Small digital habits that save you hours every week
Top tips is a weekly column where we highlight what's trending in the tech world and list practical ways to explore these trends. This week, we're looking at something we rarely think about until the end of the day: the tiny digital habits that quietly eat away at our time.Have you finished a workday feeling busy but strangely unaccomplished?You... The post Top tips: Small digital habits that save you hours every week appeared first on ManageEngine Blog.
Identity Orchestration 101
TLDR Enterprise identity verification sprawls across dozens of disconnected systems, forcing users to re-authenticate at every touchpoint while IT teams maintain incompatible security policies across each one. Identity orchestration unifies these systems through a central decision engine... The post Identity Orchestration 101 appeared first on Daon.
Why Passkeys Are the Future of Passwordless Authentication
The post Why Passkeys Are the Future of Passwordless Authentication appeared first on RSA.
AI Agent Authorization: Why Static Roles Break
Give an AI agent a role, and you’ve made a bet you can’t take back… The post AI Agent Authorization: Why Static Roles Break appeared first on PlainID.
SaaS Authorization: When Access Reviews Fall Behind
A quarterly access review tells you who had access on the day someone ran the… The post SaaS Authorization: When Access Reviews Fall Behind appeared first on PlainID.