Third-party agents outpace identity controls
A 2026 report finds 1,280 third-party products embed AI, but only 282 authenticate through single sign-on, leaving most agents invisible to identity systems.
13 results for “identity security”
A 2026 report finds 1,280 third-party products embed AI, but only 282 authenticate through single sign-on, leaving most agents invisible to identity systems.
A SailPoint report finds most organizations still run identity security at human speed even as they deploy AI agents that operate far faster.
Contributed analysis from Token Security warns that agent autonomy can turn ordinary access grants into unpredictable attack paths.
The Hacker News explains how unregistered accounts and machine credentials keep IAM blind spots open across cloud estates.
Okta's review of a 7 GB infostealer dump found unexpired AI service tokens that can be replayed without a password or MFA.
Executives targeted in vishing attacks that steal tokens and extort victims.
CVE-2026-18963 allows full account takeover via reset flow; patches out.
As AI accelerates account takeover attacks, experts argue credentials alone can no longer secure access.
Okta plans to acquire Permiso Security to bolster its identity threat detection capabilities within multi-cloud environments.
Threat actors are weaponizing OAuth client ID spoofing to validate stolen credentials while remaining invisible to standard telemetry.
Microsoft details how threat actors bypassed traditional defenses to compromise Salesforce environments via OAuth and guest access.
A new subscription-based phishing service leverages device code theft and AI to bypass traditional security defenses.
A flurry of 37 cybersecurity acquisitions in June 2026 underscores how major tech firms are rapidly integrating AI and identity governance.