Identity & Access

AI Is Supercharging Phishing: Here’s How to Fight Back

AI, Identity & Access, phishing /

AI Is Supercharging Phishing: Here’s How to Fight Back 2025-11-19 at 14:19 By Torsten George AI has given cybercriminals the ability to operate like Fortune‑500‑scale marketing departments—except their product is account takeover, data theft, and identity fraud. The post AI Is Supercharging Phishing: Here’s How to Fight Back appeared first on SecurityWeek. This article is […]

AI Is Supercharging Phishing: Here’s How to Fight Back Read More »

Apono Raises $34 Million for Cloud Identity Management Platform

Apono, Cybersecurity Funding, funding, identity, Identity & Access /

Apono Raises $34 Million for Cloud Identity Management Platform 2025-11-18 at 16:54 By Ionut Arghire The company will use the investment to accelerate product development, expand go-to-market operations, and hire new talent. The post Apono Raises $34 Million for Cloud Identity Management Platform appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View […]

Apono Raises $34 Million for Cloud Identity Management Platform Read More »

Defakto Raises $30 Million for Non-Human IAM Platform

Cybersecurity Funding, Defakto, funding, IAM, identity, Identity & Access /

Defakto Raises $30 Million for Non-Human IAM Platform 2025-10-21 at 17:41 By Eduard Kovacs Defakto’s Series B funding, which brings the total raised to $50 million, was led by XYZ Venture Capital. The post Defakto Raises $30 Million for Non-Human IAM Platform appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]

Defakto Raises $30 Million for Non-Human IAM Platform Read More »

Descope Raises $35 Million in Seed Round Extension

Cybersecurity Funding, Descope, funding, IAM, identity, Identity & Access /

Descope Raises $35 Million in Seed Round Extension 2025-10-01 at 14:18 By Ionut Arghire The identity and access management provider will invest in agentic identity R&D, expand to new regions, and hire new talent. The post Descope Raises $35 Million in Seed Round Extension appeared first on SecurityWeek. This article is an excerpt from SecurityWeek […]

Descope Raises $35 Million in Seed Round Extension Read More »

Hush Security Emerges Stealth to Eliminate Credential Threats With No-Secrets Platform

Cybersecurity Funding, funding, Identity & Access /

Hush Security Emerges Stealth to Eliminate Credential Threats With No-Secrets Platform 2025-09-10 at 13:52 By Kevin Townsend Tel Aviv–based startup replaces vaults and secrets managers with just-in-time policies, aiming to eliminate credentials entirely. The post Hush Security Emerges Stealth to Eliminate Credential Threats With No-Secrets Platform appeared first on SecurityWeek. This article is an excerpt […]

Hush Security Emerges Stealth to Eliminate Credential Threats With No-Secrets Platform Read More »

Amazon Disrupts Russian Hacking Campaign Targeting Microsoft Users

APT29, cloud security, Cozy Bear, Identity & Access, Midnight Blizzard, Russia /

Amazon Disrupts Russian Hacking Campaign Targeting Microsoft Users 2025-09-02 at 15:21 By Ionut Arghire The Midnight Blizzard cyberspies used compromised websites to trick users into authorizing devices they controlled. The post Amazon Disrupts Russian Hacking Campaign Targeting Microsoft Users appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Amazon Disrupts Russian Hacking Campaign Targeting Microsoft Users Read More »

Passkey Login Bypassed via WebAuthn Process Manipulation

Authentication Bypass, browser extension, Featured, Identity & Access, passkey /

Passkey Login Bypassed via WebAuthn Process Manipulation 2025-08-14 at 12:21 By Eduard Kovacs Researchers at enterprise browser security firm SquareX showed how an attacker can impersonate a user and bypass passkey security.  The post Passkey Login Bypassed via WebAuthn Process Manipulation appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Passkey Login Bypassed via WebAuthn Process Manipulation Read More »

1Kosmos Raises $57 Million for Identity Verification and Authentication Platform

1Kosmos, authentication, Cybersecurity Funding, funding, identity, Identity & Access /

1Kosmos Raises $57 Million for Identity Verification and Authentication Platform 2025-08-12 at 16:11 By Eduard Kovacs 1Kosmos has raised $57 million in Series B funding, which brings the total raised by the company to $72 million. The post 1Kosmos Raises $57 Million for Identity Verification and Authentication Platform appeared first on SecurityWeek. This article is […]

1Kosmos Raises $57 Million for Identity Verification and Authentication Platform Read More »

Help Desk at Risk: Scattered Spider Shines Light on Overlook Threat Vector

cybercrime, Identity & Access, Network Security, Scattered Spider /

Help Desk at Risk: Scattered Spider Shines Light on Overlook Threat Vector 2025-08-08 at 19:08 By Torsten George As attackers target help desks and identity systems, traditional security perimeters are proving insufficient against agile, socially-engineered threats. The post Help Desk at Risk: Scattered Spider Shines Light on Overlook Threat Vector appeared first on SecurityWeek. This […]

Help Desk at Risk: Scattered Spider Shines Light on Overlook Threat Vector Read More »

PLoB: A Behavioral Fingerprinting Framework to Hunt for Malicious Logins

Identity & Access, Incident Response, PLoB, Splunk /

PLoB: A Behavioral Fingerprinting Framework to Hunt for Malicious Logins 2025-08-06 at 19:48 By Kevin Townsend Splunk researchers developed a system to fingerprint post-logon behavior, using AI to find subtle signals of intrusion. The post PLoB: A Behavioral Fingerprinting Framework to Hunt for Malicious Logins appeared first on SecurityWeek. This article is an excerpt from […]

PLoB: A Behavioral Fingerprinting Framework to Hunt for Malicious Logins Read More »

Who’s Really Behind the Mask? Combatting Identity Fraud

fraud, Fraud & Identity Theft, identity, Identity & Access /

Who’s Really Behind the Mask? Combatting Identity Fraud 2025-07-31 at 16:33 By Etay Maor Why context, behavioral baselines, and multi-source visibility are the new pillars of identity security in a world where credentials alone no longer cut it. The post Who’s Really Behind the Mask? Combatting Identity Fraud appeared first on SecurityWeek. This article is […]

Who’s Really Behind the Mask? Combatting Identity Fraud Read More »

Palo Alto Networks to Acquire CyberArk for $25 Billion

Acquisition, CyberArk, Featured, Funding/M&A, Identity & Access, Palo Alto Networks /

Palo Alto Networks to Acquire CyberArk for $25 Billion 2025-07-30 at 16:32 By Mike Lennon Strategic acquisitions marks Palo Alto Networks’ formal entry into the identity security space and accelerates its platform strategy. The post Palo Alto Networks to Acquire CyberArk for $25 Billion appeared first on SecurityWeek. This article is an excerpt from SecurityWeek […]

Palo Alto Networks to Acquire CyberArk for $25 Billion Read More »

Booz Allen Invests in Machine Identity Firm Corsha

Corsha, Cybersecurity Funding, IAM, Identity & Access, IoT, IoT Security /

Booz Allen Invests in Machine Identity Firm Corsha 2025-07-10 at 15:03 By Kevin Townsend ‘Machine identities’, often used interchangeably with ‘non-human identities’ (NHIs), have been increasing rapidly since the start of digital transformation. The post Booz Allen Invests in Machine Identity Firm Corsha appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View […]

Booz Allen Invests in Machine Identity Firm Corsha Read More »

Thousands of SaaS Apps Could Still Be Susceptible to nOAuth

Application Security, EntraID, Identity & Access, noAuth, SaaS /

Thousands of SaaS Apps Could Still Be Susceptible to nOAuth 2025-06-25 at 17:26 By Kevin Townsend New research suggests more than 10,000 SaaS apps could remain vulnerable to a nOAuth variant despite the basic issue being disclosed in June 2023. The post Thousands of SaaS Apps Could Still Be Susceptible to nOAuth appeared first on […]

Thousands of SaaS Apps Could Still Be Susceptible to nOAuth Read More »

Identity Is the New Perimeter: Why Proofing and Verification Are Business Imperatives

AI, AIM, deepfake, Identity & Access /

Identity Is the New Perimeter: Why Proofing and Verification Are Business Imperatives 2025-06-24 at 14:10 By Torsten George The future of secure digital engagement depends on continuous identity verification and proofing that can scale with risk. The post Identity Is the New Perimeter: Why Proofing and Verification Are Business Imperatives appeared first on SecurityWeek. This […]

Identity Is the New Perimeter: Why Proofing and Verification Are Business Imperatives Read More »

Russian Hackers Bypass Gmail MFA with App Specific Password Ruse

app-specific passwords, APT29, Citizen Lab, email security, Gmail, Google, Identity & Access, Nation-State, Russia /

Russian Hackers Bypass Gmail MFA with App Specific Password Ruse 2025-06-18 at 22:01 By Ryan Naraine Russian hackers posed as US State Department staff and convinced targets to generate and give up Google app-specific passwords. The post Russian Hackers Bypass Gmail MFA with App Specific Password Ruse appeared first on SecurityWeek. This article is an […]

Russian Hackers Bypass Gmail MFA with App Specific Password Ruse Read More »

Misconfigured HMIs Expose US Water Systems to Anyone with a Browser

Censys, HMI, ICS, ICS/OT, Identity & Access, SCADA, Water /

Misconfigured HMIs Expose US Water Systems to Anyone with a Browser 2025-06-05 at 22:47 By Ryan Naraine Censys researchers follow some clues and find hundreds of control-room dashboards for US water utilities on the public internet. The post Misconfigured HMIs Expose US Water Systems to Anyone with a Browser appeared first on SecurityWeek. This article […]

Misconfigured HMIs Expose US Water Systems to Anyone with a Browser Read More »

Cerby Raises $40 Million for Identity Automation Platform

Cerby, DTCP Capital, Funding/M&A, Identity & Access, Okta Ventures, Salesforce Ventures, Series B /

Cerby Raises $40 Million for Identity Automation Platform 2025-05-28 at 16:29 By Ionut Arghire Identity security automation platform Cerby has raised $40 million in Series B funding to scale operations. The post Cerby Raises $40 Million for Identity Automation Platform appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Cerby Raises $40 Million for Identity Automation Platform Read More »

Akamai, Microsoft Disagree on Severity of Unpatched ‘BadSuccessor’ Flaw

Active Directory, Akamai, BadSuccessor, email security, Identity & Access, Microsoft, Vulnerabilities, Windows Server 2025 /

Akamai, Microsoft Disagree on Severity of Unpatched ‘BadSuccessor’ Flaw 2025-05-22 at 20:08 By Ryan Naraine Akamai documents a privilege escalation flaw in Windows Server 2025 after Redmond declines to ship an immediate patch. The post Akamai, Microsoft Disagree on Severity of Unpatched ‘BadSuccessor’ Flaw appeared first on SecurityWeek. This article is an excerpt from SecurityWeek […]

Akamai, Microsoft Disagree on Severity of Unpatched ‘BadSuccessor’ Flaw Read More »

Microsoft Accounts Go Passwordless by Default

authentication, identity, Identity & Access, Microsoft, passkey, password, passwordless /

Microsoft Accounts Go Passwordless by Default 2025-05-02 at 12:32 By Ionut Arghire Microsoft is prioritizing passwordless sign-in and sign-up methods, and is making new accounts passwordless by default. The post Microsoft Accounts Go Passwordless by Default appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Microsoft Accounts Go Passwordless by Default Read More »

Scroll to Top