Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
596 matching stories — in MFA & Passwordless — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Microsoft has resolved a known issue in which games and Windows 11 apps crashed when decoding AC-3 audio after the September 2026 preview update KB5124010. The fix is part of the October 2026 Patch Tuesday release, KB5127648.
A critical flaw in Broadcom's Wi-Fi Protected Setup lets attackers execute code as root on millions of routers within radio range, with no fix available.
Protect sensitive data by pairing Cyera's data discovery with Akamai Guardicore Segmentation to enforce dynamic, data-aware microsegmentation rules.
The post Phishing-Resistant MFA: What It Is, and Why It’s the Next Step Beyond Traditional MFA appeared first on WALLIX.
As leading AI labs like OpenAI and Anthropic test business models and enterprises chase elusive returns, only robust data governance consistently delivers value, regardless of how the AI landscape shifts.
At 1Password, we believe strong security should feel like part of the workflow, not an interruption. That is the goal behind our work on user verification (UV) for passkeys.UV is a local identity check a website can require as part of a passkey action, to confirm the person approving the action is the person authorized to do so. This decision belongs to the website, not 1Password, as the site will validate UV occurred before accepting the operation. A useful analogy is paying with a bank card. F
In most organizations, standing privileges don’t show up all at once. They accumulate quietly. A role is added “temporarily.” A contractor needs broad access to finish a project. A service account gets oversized permissions because no one has time to fine-tune them. None of these choices seem harmful in the moment, but over time they build into a privilege surface that’s far too large to monitor and far too easy to misuse.The challenge is that standing privileges often look harmless until someth
What you’ll learn: You’ll deep dive into biometric identity management. Learn what it is and how it verifies a person’s identity and keeps it up to date at access points across the enterprise.
Microsoft has announced it’s retiring its own SMS and voice call delivery in Entra ID from 1 February 2027. It’s part of a broader push toward phishing-resistant authentication that already made passkeys the default sign-in method in September 2026. Many identity leaders will see this as long overdue. Others will be working out what it [...]
Secure Thunderbird Access to Dovecot with OAuth 2.0 and Rublon Identity Bridge The post Multi-Factor Authentication (2FA/MFA) for Thunderbird appeared first on Rublon.
The post Checklist – Digital Sovereignty: 9 questions to check to have a better posture appeared first on WALLIX.
In the first post in this series, Wade shared how our team laid the foundation for using AI in detection engineering. The short version is that an LLM doesn't know your stack. Without documentation and workflow context, it can produce plausible results that are difficult to trust, regardless of which model you use.That post closed with an instruction: Validate before you ship, because the output can look completely right and still be wrong. Every detection an agent writes still needs to go throu
Nine options for verifying a help desk caller, compared on the same nine questions: what each checks, what it asks the caller for, and what it keeps. Last verified September 30, 2026. The post Account Takeover Protection for IT Help Desks, Compared appeared first on Trusona.
The post INFRATEX ENERGY & SYSTEMS appeared first on WALLIX.
Bring private certificate authority management, identity-bound issuance, and automated deployment together with JumpCloud PKI. The post Introducing JumpCloud PKI: Managed Client Certificates for Wi-Fi, VPN, and Application Access appeared first on JumpCloud.
MFA works best when the data behind it is current. Scattered directories and overnight sync jobs leave gaps attackers look for. Learn why Active Directory Is the Fine Print and how VIS can help. The post Dedicated vs. Shared: What Most IAM Vendors Won’t Tell You About Your Shared Cloud Infrastructure appeared first on Optimal IdM.
Discover how to adapt your privileged access management (PAM) program to improve security, auditability, and governance for AI agents. The post The 4 Questions Your Privileged Access Program Can’t Yet Answer About AI Agents appeared first on JumpCloud.
Speed, cost, and adaptability change—but not the underlying need to gain access.The post 5 cybersecurity assumptions AI attacks break appeared first on Silverfort.
Iru AI can now recommend and implement Windows Update settings based on CIS benchmarks or Microsoft defaults, and you can ask follow-up questions to refine those settings or understand their behavior.
Today, Silverfort announces an integration that brings its runtime Identity Security approach to Agent Gateway, part of Google Cloud Gemini Enterprise, giving teams real-time visibility into AI agent activity and enforcing access decisions as they happen. After Silverfort was named in Google Cloud’s Next ’26 announcement among the partner services bringing identity and governance administration […]The post Silverfort Secures AI Agents on Google Cloud in Runtime with Agent Gateway Integrati
An administrator needs to sign in during an internet outage. A traveling employee opens a laptop without Wi-Fi. A workstation operates on an internal network with restricted external connectivity. In each case, the organization still needs to verify who is signing in. Offline FIDO MFA lets users complete multi-factor authentication with an enrolled FIDO2 security […] The post Offline FIDO MFA: Phishing-Resistant Login Without Internet appeared first on Rublon.
Discover how agentic workflows help IT secure and manage AI agents, eliminate governance gaps, and scale automation safely. The post Securing the Autonomous Enterprise: Managing Agentic Workflows in IT appeared first on JumpCloud.
As enterprises race to deploy autonomous AI agents to accelerate business, a new report reveals they are tethered to security architectures built for a different era. The "Horizons of Identity Security" report from SailPoint highlights a critical “velocity paradox,” in which organizations invest in AI-speed business operations while continuing to rely on human-speed security controls, creating a
Toronto, ON – October 8 2026 – BioConnect, the biometric access control platform behind 8 of the 10 largest colocation facilities, today announced the release of BioConnect Enterprise 5.6. The release lets data centers run 1,000 biometric devices per server from a single enrollment. Combined with BioConnect’s synchronization architecture, the result is that customers can deploy thousands of readers in a single system. Users enroll once, and their identity is synchronized automatically across eve
Non-human identities (NHIs)—service accounts, application identities, API keys—have become the most prevalent identity types across corporate environments. They also tend to behave differently from the humans they serve. A person might log in from home, a coffee shop, an airport, and three different countries in a single month. A service principal that authenticates your third-party […]The post Making native geofencing work for cloud non-human identities appeared first on Silverfort.
MFA works best when the data behind it is current. Scattered directories and overnight sync jobs leave gaps attackers look for. Learn why Active Directory Is the Fine Print and how VIS can help. The post MFA Is the Headline of Cybersecurity Awareness Month. Your Active Directory Is the Fine Print. appeared first on Optimal IdM.
Passwordless Authentication Solutions: Must-Have Features in 2026 Get a breakdown of essential capabilities for passwordless authentication solutions and questions for prospective buyers to ask when evaluating vendors. Passwords and knowledge-based authentication factors can be a major headache for security and IT teams. Stolen and reused credentials are still behind the majority of enterprise breaches, IT help desks lose thousands of hours a year to password resets alone, off-the-shelf phishing
We’ve all heard the standard online safety advice: Create a strong password, use multi-factor authentication (MFA),  be vigilant of phishing attacks by watching  for red flagsin emails, and update your software. Unfortunately, following these best practices alone is no longer enough for accounts to stay secure in an increasingly sophisticated world of cyber threats. Would […] The post 2026 Global Authentication Survey: Cybersecurity and IT pros are still using passwords… appeared
Financial institutions in Saudi Arabia now face concrete deadlines to prepare for quantum computing risks. With the Saudi Central Bank (SAMA) issuing new requirements in August 2026, financial institutions now have specific milestones to work toward, and the first one arrives before the end of this year.
CISA's 2026 Cybersecurity Awareness Month materials tell people to verify an unexpected call through a phone number they already have. At a help desk, that advice becomes a callback, and CISA's own advisory on Scattered Spider shows how a callback can reach the attacker. The post Cybersecurity Awareness Month Says Verify the Caller. At the Help Desk, That’s Harder. appeared first on Trusona.
Scope: This article covers discoverable FIDO2 credentials, commonly referred to as passkeys, that can be managed on the YubiKey. Non-discoverable FIDO2 security-key credentials do not appear in Yubico Authenticator’s Passkeys view or in ykman fido credentials list, and they cannot be individually removed with ykman fido credentials delete. Their registration is typically removed at the […] The post How to Delete a Passkey from a YubiKey: Yubico Authenticator & ykman appeared first on
Yubico recently joined the European Cyber Security Organisation (ECSO), Europe’s largest cross-sector cybersecurity community. As AI fuels an unprecedented 200% surge in automated phishing and social engineering attacks across Europe, Yubico and ECSO are establishing a phishing-resistant digital identity baseline to defend European enterprises, public authorities, and critical infrastructure against a rapidly evolving threat landscape. […] The post European cyber resilience starts with tru