Cloud Security
The Midnight Blizzard cyberspies used compromised websites to trick users into authorizing devices they controlled.
Hi, what are you looking for?
SecurityWeek
Artificial Intelligence
Researchers show how context manipulation can cause agentic browsers to abandon safety guardrails and exfiltrate sensitive credentials.
Funding/M&A
Israel-based Entro specializes in non-human identity and credential security solutions, and it will enable SailPoint to enhance its products.
Identity & Access
Attendees will learn how attackers evade conventional detection methods, why legacy MFA alone is no longer sufficient, and how organizations can strengthen their defenses.
Cybersecurity Funding
The startup has built a security-first identity platform to protect humans, machines, and AI agents.
Identity & Access
Researchers at enterprise browser security firm SquareX showed how an attacker can impersonate a user and bypass passkey security.
Cybersecurity Funding
1Kosmos has raised $57 million in Series B funding, which brings the total raised by the company to $72 million.
Cybercrime
As attackers target help desks and identity systems, traditional security perimeters are proving insufficient against agile, socially-engineered threats.
Identity & Access
Splunk researchers developed a system to fingerprint post-logon behavior, using AI to find subtle signals of intrusion.
Fraud & Identity Theft
Why context, behavioral baselines, and multi-source visibility are the new pillars of identity security in a world where credentials alone no longer cut it.
Funding/M&A
Strategic acquisitions marks Palo Alto Networks' formal entry into the identity security space and accelerates its platform strategy.
Cybersecurity Funding
‘Machine identities’, often used interchangeably with ‘non-human identities’ (NHIs), have been increasing rapidly since the start of digital transformation.
Application Security
New research suggests more than 10,000 SaaS apps could remain vulnerable to a nOAuth variant despite the basic issue being disclosed in June 2023.
Identity & Access
The future of secure digital engagement depends on continuous identity verification and proofing that can scale with risk.
Email Security
Russian hackers posed as US State Department staff and convinced targets to generate and give up Google app-specific passwords.
ICS/OT
Censys researchers follow some clues and find hundreds of control-room dashboards for US water utilities on the public internet.
Funding/M&A
Identity security automation platform Cerby has raised $40 million in Series B funding to scale operations.
Email Security
Akamai documents a privilege escalation flaw in Windows Server 2025 after Redmond declines to ship an immediate patch.
Identity & Access
Microsoft is prioritizing passwordless sign-in and sign-up methods, and is making new accounts passwordless by default.
Cloud Security
San Francisco identity security play Veza closes a Series D fund round led by New Enterprise Associates (NEA).
Cybersecurity Funding
Push Security has raised $30 million in Series B funding to scale its browser-based identity security platform.
Cybersecurity Funding
Identity protection startup AuthMind has announced raising $19.3 million in a seed funding round led by Cheyenne Ventures.
Identity & Access
CISA is making recommendations for organizations and users in light of the recent Oracle legacy cloud environment hack.
Identity & Access
Major companies have agreed to gradually reduce the lifetime of TLS certificates over the next few years.
Join this live webinar as we break down why email-layer defenses alone can't keep pace with the modern phishing ecosystem, how agentic AI is changing the capacity equation for security teams, and more.
RegisterThis year's summit will help organizations learn how to utilize tools, controls, and design models needed to properly secure cloud environments. Interact with leading solution providers and other end users facing similar challenges in securing a variety of cloud deployments.
RegisterExpert Insights
As AI-generated code becomes commonplace, CISOs need new audit strategies to measure developer practices, govern AI tool usage, and identify software risks before they reach production.
(Matias Madou)
From model selection and automation to validation and measurable results, the right questions can help enterprises separate genuine AI capabilities from marketing hype.
(Joshua Goldfarb)
As cybersecurity platforms embrace agentic AI, organizations must balance detection performance against the escalating costs of token consumption, deployment architecture, and AI credits.
(Danelle Au)
From hidden content injections to cognitive state poisoning, attackers are turning trusted data sources into traps for autonomous AI.
(Etay Maor)
Groups like ShinyHunters are demonstrating that attackers do not necessarily need malware or zero-day exploits to cause massive damage.
(Torsten George)