Identity & Access
Two technologies — one for public safety, one for controlled entry — show why trust in facial recognition must be earned, not assumed.
Hi, what are you looking for?
SecurityWeek
Identity & Access
The identity security company beat quarterly expectations and raised its outlook as enterprises face growing pressure to secure AI agents and other non-human identities.
Identity & Access
Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop.
Identity & Access
When Android users get a call from a non-contact, they will see more information about the caller, including their country.
Identity & Access
Palo Alto Networks researchers have demonstrated attacks against Google’s synced passkey implementation.
Cybersecurity Funding
The cybersecurity startup plans to use the seed funding to accelerate product expansion and global growth.
Identity & Access
AI has given cybercriminals the ability to operate like Fortune‑500‑scale marketing departments—except their product is account takeover, data theft, and identity fraud.
Cybersecurity Funding
The company will use the investment to accelerate product development, expand go-to-market operations, and hire new talent.
Cybersecurity Funding
Leveraging AI, ConductorOne’s platform secures and manages millions of human, non-human, and AI identities.
Cybersecurity Funding
Defakto’s Series B funding, which brings the total raised to $50 million, was led by XYZ Venture Capital.
Cybersecurity Funding
The identity and access management provider will invest in agentic identity R&D, expand to new regions, and hire new talent.
Cybersecurity Funding
Tel Aviv–based startup replaces vaults and secrets managers with just-in-time policies, aiming to eliminate credentials entirely.
Cloud Security
The Midnight Blizzard cyberspies used compromised websites to trick users into authorizing devices they controlled.
Identity & Access
Researchers at enterprise browser security firm SquareX showed how an attacker can impersonate a user and bypass passkey security.
Cybersecurity Funding
1Kosmos has raised $57 million in Series B funding, which brings the total raised by the company to $72 million.
Cybercrime
As attackers target help desks and identity systems, traditional security perimeters are proving insufficient against agile, socially-engineered threats.
Identity & Access
Splunk researchers developed a system to fingerprint post-logon behavior, using AI to find subtle signals of intrusion.
Fraud & Identity Theft
Why context, behavioral baselines, and multi-source visibility are the new pillars of identity security in a world where credentials alone no longer cut it.
Funding/M&A
Strategic acquisitions marks Palo Alto Networks' formal entry into the identity security space and accelerates its platform strategy.
Cybersecurity Funding
‘Machine identities’, often used interchangeably with ‘non-human identities’ (NHIs), have been increasing rapidly since the start of digital transformation.
Application Security
New research suggests more than 10,000 SaaS apps could remain vulnerable to a nOAuth variant despite the basic issue being disclosed in June 2023.
Identity & Access
The future of secure digital engagement depends on continuous identity verification and proofing that can scale with risk.
Email Security
Russian hackers posed as US State Department staff and convinced targets to generate and give up Google app-specific passwords.
ICS/OT
Censys researchers follow some clues and find hundreds of control-room dashboards for US water utilities on the public internet.
Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.
RegisterIn this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.
RegisterExpert Insights
For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality.
(Danelle Au)
Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop.
(Torsten George)
Silent patches can become exploit intelligence for attackers while leaving defenders without the context needed to prioritize risk.
(Tod Beardsley)
The skills that get a CISO hired are rarely the skills they are judged on later. Most security leaders are stuck in that gap. Closing it is the real job.
(Sravish Sridhar)
As AI dramatically shortens the time from vulnerability disclosure to exploitation, enterprises must look beyond patching to reduce application risk.
(Joshua Goldfarb)