Third-party agents outpace identity controls
A 2026 report finds 1,280 third-party products embed AI, but only 282 authenticate through single sign-on, leaving most agents invisible to identity systems.
30 results for “identity”
A 2026 report finds 1,280 third-party products embed AI, but only 282 authenticate through single sign-on, leaving most agents invisible to identity systems.
A SailPoint report finds most organizations still run identity security at human speed even as they deploy AI agents that operate far faster.
Hackers accessed the Technical University of Denmark's identity system using compromised credentials, potentially exposing data of up to 200,000 people.
Hackers accessed DMDC personnel records for nearly nine months, exposing Social Security numbers and military data of over 3 million people.
Contributed analysis from Token Security warns that agent autonomy can turn ordinary access grants into unpredictable attack paths.
Malwarebytes reports smishing attacks mimicking Revolut's identity checks after a breach of the bank's Lithuanian entity.
The Hacker News explains how unregistered accounts and machine credentials keep IAM blind spots open across cloud estates.
Investors say AI agents are being deployed faster than they can be secured, opening a market for startups that can govern non-human identities.
A longtime CISO argues that asset visibility, identity management, and recovery planning matter more than the newest security products.
A HYPR report finds most fraudulent hires receive corporate credentials before detection, leaving firms exposed to insider risk.
A fintech breach via fake government emails exposes sensitive customer data, raising questions about verification controls.
Thirty-three cybersecurity M&A deals were announced in August 2026, with AI, identity, and exposure management topping the shopping lists.
IDScan confirmed hackers accessed customer data in its cloud platform after reports linked it to 153 million stolen driver's license scans.
Noma Labs research describes an authorization design flaw that lets unauthenticated input trigger privileged AI workflow actions.
An essay argues that AI-era detection succeeds not by better inference but by carrying authoritative facts attackers must guess.
Okta's review of a 7 GB infostealer dump found unexpired AI service tokens that can be replayed without a password or MFA.
ShinyHunters claims a Florida DMV breach, threatening to release 200,000 records by September 11.
Security experts call for new controls as AI agents inherit privileged access, demanding hard limits and real-time monitoring.
Executives targeted in vishing attacks that steal tokens and extort victims.
Multiple lawsuits target IDScan after alleged breach exposed 153M driver's licenses for sale on dark web.
A dark web service is selling 153M+ driver's license images, prompting an FBI inquiry.
Autonomous agents strain zero trust's identity limits, experts warn as adoption lags.
Autonomous AI attackers can chain cloud misconfigurations at machine speed, forcing CISOs to rethink defense.
LACMA's 2025 breach exposed social security and medical data; notifications sent.
Attackers shift focus from login to onboarding and account recovery, exploiting weak identity verification.
ReliaQuest says ShinyHunters accessed an identity dashboard briefly but no customer data was compromised.
CVE-2026-18963 allows full account takeover via reset flow; patches out.
An open database from ClarityCheck exposed 9M+ facial images, risking identity theft and phishing.
Australian apart-hotel chain Quest warns guests of a data breach via a third-party provider, risking identity fraud.
Major acquisitions by Bank of America, CrowdStrike, and Cyera signal continued consolidation in cybersecurity.