Incidents & Breaches
Identity attacks surpass vulnerabilities as top ransomware cause
Phishing and malicious email now cause half of all ransomware attacks, according to a report surveying 1,200 IT and security professionals [2, 3].
Beyond IAM — Identity Security News: SSO, MFA, Passkeys and Account Takeover
Top stories
FBI reports $262 million in losses from account takeover fraud
Cisco warns of exploited zero-day authentication bypass in ISE
Incidents & Breaches
Attacker bypasses MFA at 79 organizations using token spraying
An attacker used "token spraying" to bypass MFA at 79 organizations, registering rogue devices and replacing MFA methods to survive password resets.
Authentication & MFA
Microsoft to retire Entra ID SMS and voice authentication by 2027
Microsoft is phasing out legacy MFA in favor of passkeys as attackers increasingly target the identity layer and conditional access policies.
Flaws & Advisories
Okta expands identity services into runtime enforcement for AI agents
The identity provider is moving into the runtime path with an Agent Gateway to prevent AI agents from taking unintended actions in enterprise systems.
Flaws & Advisories
China-linked group exploits BeyondTrust zero-day to steal credentials
The threat actor ARMORY CASTLE targeted remote support appliances starting in August 2026, using a critical flaw to gain root access and pivot into in...
Incidents & Breaches
Microsoft to block Entra ID script injection attacks by late October 2026
The company will block external script injections during sign-ins by late October 2026 as part of a security initiative announced after 2023 breaches...
Flaws & Advisories
Cisco warns of exploited authentication bypass in SD-WAN Manager
A critical flaw in Catalyst SD-WAN Manager allows unauthenticated admin access, while NinjaOne implements a controlled bypass to reduce SSO friction.
By subject
Incidents & Breaches
9 reports
Flaws & Advisories
6 reports
Authentication & MFA
6 reports
Analysis & Practice
1 report
