Incidents & Breaches
Attacker bypasses MFA at 79 organizations using token spraying
An attacker used "token spraying" to bypass MFA at 79 organizations, registering rogue devices and replacing MFA methods to survive password resets.
Beyond IAM — Identity Security News: SSO, MFA, Passkeys and Account Takeover
Top stories
Microsoft to retire Entra ID SMS and voice authentication by 2027
Okta expands identity services into runtime enforcement for AI agents
Flaws & Advisories
China-linked group exploits BeyondTrust zero-day to steal credentials
The threat actor ARMORY CASTLE targeted remote support appliances starting in August 2026, using a critical flaw to gain root access and pivot into in...
Incidents & Breaches
Microsoft to block Entra ID script injection attacks by late October 2026
The company will block external script injections during sign-ins by late October 2026 as part of a security initiative announced after 2023 breaches...
Flaws & Advisories
Cisco warns of exploited authentication bypass in SD-WAN Manager
A critical flaw in Catalyst SD-WAN Manager allows unauthenticated admin access, while NinjaOne implements a controlled bypass to reduce SSO friction.
Authentication & MFA
Security professionals rely on passwords despite passkey knowledge
A joint study by Okta and Yubico finds 43% of security experts use passwords for work due to structural friction and legacy onboarding.
Flaws & Advisories
China-nexus group steals admin credentials via BeyondTrust zero-day
A China-nexus group used a CVSS 9.3 zero-day to dump administrative vaults and pivot into downstream systems starting in August 2026.
Authentication & MFA
FIDO2 passkeys block session token theft
Organizations are shifting to phishing-resistant passkeys as attackers use reverse proxies to steal session tokens and bypass traditional MFA in Micro...
By subject
Incidents & Breaches
7 reports
Flaws & Advisories
5 reports
Authentication & MFA
6 reports
Analysis & Practice
1 report
