Beyond IAM — Identity Security News: SSO, MFA, Passkeys and Account Takeover

FBI reports $262 million in losses from account takeover fraud

Cisco warns of exploited zero-day authentication bypass in ISE

The CVE-2026-76460 vulnerability carries a CVSS 10.0 score and allows remote attackers to bypass the web-based management interface of the policy plat...

Attacker bypasses MFA at 79 organizations using token spraying

An attacker used "token spraying" to bypass MFA at 79 organizations, registering rogue devices and replacing MFA methods to survive password resets.

Microsoft to retire Entra ID SMS and voice authentication by 2027

Microsoft is phasing out legacy MFA in favor of passkeys as attackers increasingly target the identity layer and conditional access policies.

Okta expands identity services into runtime enforcement for AI agents

The identity provider is moving into the runtime path with an Agent Gateway to prevent AI agents from taking unintended actions in enterprise systems.

China-linked group exploits BeyondTrust zero-day to steal credentials

The threat actor ARMORY CASTLE targeted remote support appliances starting in August 2026, using a critical flaw to gain root access and pivot into in...