Stale job access lingers because nobody owns removal
The author says role transfers should trigger a deletion review, with named owners and expiry dates on extra rights.
Stories per day · 30 days
6 stories, newest first · one card per story
Stories tagged #access-management
Continuous governance replaces periodic reviews for identity security
Organizations should move to continuous identity governance using unified platforms to manage access for human, machine, and AI identities in real time.
1
Business Survival in the Age of AI
Oasis Security executive argues enterprises need 'least agency' controls for AI agents, citing a Cursor agent's nine-second production database deletion and Claude Desktop flaw.
2
Dental contractor set up secret account with access to 4,000 patient records then left the company
A dental practice left an unknown vendor admin account with access to 4,000 patient records active for over three years, creating HIPAA risk.
1
Webinar: The forgotten Google Workspace access that can lead to a breach
BleepingComputer and Material Security will host a September 23, 2026 webinar on breaches caused by forgotten third-party Google Workspace integrations.
1
Terminated employee cost company hundreds of thousands of dollars because nobody revoked access
A terminated employee's unrevoked access let him delete files and corrupt a database, costing the company hundreds of thousands of dollars and weeks of delays.
2