Continuous governance replaces periodic reviews for identity security
Organizations should move to continuous identity governance using unified platforms to manage access for human, machine, and AI identities in real time.
1
Stories per day · 30 days
5 RSS
Relatedaccess-management1ai1ai-identities1cisa-kev1governance1marketing1php1php2shell1privilege-escalation1webinar1zero-day1
33 stories, newest first · one card per story
Stories tagged #identity-security
PHP2Shell cleanup will lag exploitation; Token Security argues identity limits matter more than CVSS
Censys counted 32.5 million internet-facing PHP services on vulnerable versions a week after patching, and CISA added both flaws to its KEV list on October 26.
[Webinar] How to Stop AI-Driven Privilege Escalation With Runtime Identity Controls
A partner webinar pitches runtime identity controls against AI-accelerated privilege escalation after account compromise.
3
The AI Velocity Paradox: Why Security Is Decades Behind AI Ambition
SailPoint says most firms still govern AI agents with human-speed identity controls.
3
SailPoint adds AI agent discovery, temporary access and compliance automation
SailPoint added AI-agent discovery, just-in-time access, and automated compliance to its identity platform.
2
The State of Cybersecurity in 2026: Key Segments, Insights, and Innovations
Sponsored Hacker News roundup outlines 2026 cybersecurity trends across identity, endpoints, exposure, and AI-driven operations.
3
AI agents keep access to company data after their work is done
Delinea's 2026 report finds AI agents often retain company data access after tasks, with weak real-time enforcement and traceability.
Rig Security Emerges From Stealth With $12M to Tackle Agentic AI Identity Risks
Rig Security exits stealth with $12M seed led by Ten Eleven Ventures for identity security distinguishing rogue AI agents from human users.
4
Privilege Hygiene: Least Privilege Best Practices Guide
Huntress outlines least-privilege steps to limit blast radius from excess admin rights in Microsoft 365.
1
12 Best MFA Solutions Compared (2026): Features & Pricing
Comparative analysis ranks 12 MFA solutions, highlighting Cisco Duo for transparency and Microsoft Entra MFA for M365 integration amid rising phishing threats.
2
Top 10 Best Identity Threat Detection & Response (ITDR) Tools in 2026 [Ranked & Scored]
Ranked review of ten ITDR tools scores Microsoft Defender for Identity first, with CrowdStrike Falcon and Silverfort completing the podium for identity threat detection.
1
Top 10 Best Privileged Access Management (PAM) Solutions in 2026
Cyber Security News ranks the top 10 privileged access management solutions of 2026, led by CyberArk, BeyondTrust, and Delinea.
14
Agentic security is the billion-dollar challenge for some clever startup to solve
Cybersecurity investors say securing AI agents—especially non-human identity and governance—is a massive, underserved startup opportunity.
1
SolarWinds Patches ARM Hard-Coded Key Flaw Enabling Unauthenticated RCE
SolarWinds patched CVE-2026-28326 (CVSS 8.8), a hard-coded-key flaw enabling unauthenticated remote code execution in Access Rights Manager 2026.2 and prior.
MFA Won't Save You From OAuth Consent Abuse
MFA cannot prevent OAuth consent abuse; organizations need OAuth governance, least-privilege scopes, consent monitoring, and rapid token revocation.
What Recent AI-Powered Attacks Mean for Your Identity Security
Commentary on AI-accelerated credential theft cites Google's report of a six-hour multi-agent cloud attack and urges device trust and zero-trust identity controls.
1
AI agent authorization risks remain a gap in new NIST-CISA token security guidance
NIST and CISA release IR 8587 guidance on securing signed tokens, but AI agent authorization and delegation risks remain out of scope.
NIST and CISA finalize playbook to stop token theft and forgery
NIST and CISA finalized NIST IR 8587, a playbook helping federal agencies and cloud providers defend identity tokens against theft and forgery.
.webp&w=828&q=75)
12 Best CIEM Tools Compared (2026): Features & Pricing
Buyer's guide compares twelve CIEM tools; Microsoft discontinued Entra Permissions Management, while Tenable (Ermetic), CyberArk, and Wiz lead the 2026 scorecard.
4
CISA Warns Hackers Exploit 17 Active Directory Techniques to Gain Control of Enterprise Networks
CISA and Five Eyes agencies issued joint guidance detailing 17 Active Directory attack techniques like Kerberoasting and DCSync, with hardening and detection advice.
3
eBook: Identity-First Threat Intelligence
Enzoic promotes an eBook on identity-first threat intelligence addressing infostealer-driven credential exposure across AD and IAM.
New infosec products of the week: September 11, 2026
Weekly product roundup: Securin Platform GA, Orchid Security AI-agent identity controls, Akeyless Agentic Runtime Authority, and Scytale AI-powered TPRM.
2
_ber1a_Alamy.png%3Fwidth%3D720%26quality%3D80%26disable%3Dupscale&w=828&q=75)
Identity-Based AI Attack Threatens Security of Enterprise Data
Dark Reading describes 'workflow identity hijacking,' an identity-based attack that hijacks enterprise AI workflows through unauthenticated entry points.
MFA's Weakest Link: Account Recovery Is the New Attack Path
Help desk account recovery is increasingly the weakest link in MFA-protected identities, as Scattered Spider's impersonation-driven Marks & Spencer attack demonstrated.
2