Identity & Access
Authentication, credentials, IAM and zero-trust access control.
Ghost Credentials in the Cloud: How a Security & Compliance Analyst Can Hunt Them Down
Dormant machine credentials and forgotten API tokens create massive cloud attack paths. Here is how tools like NHI Hound reveal hidden trust graphs.
The Digital Border: When Providing Your Passcode Becomes a Felony
The felony case against Samuel Tunick for using a GrapheneOS duress code at a border crossing raises critical questions for security & compliance analysts about device privacy, IAM, and enterprise risk management.
Why 69% of Enterprises Are Breaking AI Agent Security With Shared Credentials
VentureBeat's latest research reveals that 69% of enterprises share API keys across AI agents, turning a single compromised agent into a gateway for every workflow it touches. With $22 billion in recent security acquisitions targeting this exact gap — Palo Alto Networks' $21.1B CyberArk deal, CrowdStrike's SGNL acquisition, Cisco's Astrix buy — the market is racing to fix what enterprises have been ignoring. The data shows 54% have already experienced incidents, yet only 30% sandbox their highes
The EU Mandates Open Data Access for Google’s Search Competitors
Research and analysis on the new EU mandate under the DMA requiring Google to share anonymized search data and open Android to rival AI assistants. (twentyTaskId: )
Travelers Beware: Your Hotel Wi-Fi Just Might Be an Attack Vector
Security professionals must warn traveling employees: hotel and conference Wi-Fi networks are being hijacked to systematically compromise Microsoft 365 accounts. Discover the technical mechanics and essential defense strategies.
Chick-fil-A Breach Exposes Customer Data in Credential Stuffing Attack
Chick-fil-A discloses a data breach from credential stuffing attacks between June 17-19, 2026, exposing customer names, emails, membership data, and partial card information. Analysis of the attack vector, AI-powered threat landscape, and steps customers should take.
Microsoft is working to resolve an ongoing Exchange Online issue that has been mistakenly quarantining customers' mailboxes
Microsoft is racing to undo a cascading Exchange Online failure that began July 19, 2026, when a routine infrastructure change caused runaway memory consumption and incorrectly quarantined customer mailboxes, blocking email delivery and calendar access. Cleanup of excess indexing data reached 72% by Wednesday evening with no full-resolution timeline yet announced.
Why Stolen Credentials Keep Breaking Into Critical Infrastructure — and What Device-Bound Identity Can Do About It
From Colonial Pipeline's dormant VPN account to Volt Typhoon's years-long persistence inside U.S. critical infrastructure, identity-based attacks follow a familiar but devastating playbook. This article examines why credentials alone can't anchor zero trust, how state-backed threat actors exploit the gaps, and why binding identities to specific verified devices is emerging as a practical first step for utilities, energy, and transportation operators.
Your Gaze Is a Fingerprint—And AI Is Already Reading It
A new Dartmouth study reveals that AI can identify individuals by analyzing the abstract thematic patterns in their eye movements — not the objects they look at — using LLMs to decode subconscious conceptual priorities encoded in gaze.
AI Cybersecurity Threats: How ClickLock Uses Coercive UI Loops to Steal macOS Credentials
A new macOS malware named ClickLock terminates system processes and traps users in fake password dialogs to steal login credentials, browser data, and cryptocurrency wallets — a chilling example of how AI-driven social engineering bypasses traditional defenses.
AI Cybersecurity Threats: How UAT-11795 Weaponizes Legitimate Apps to Steal Credentials with Starland RAT
A financially motivated Russian threat actor tracked as UAT-11795 is using trojanized installers of legitimate software like WebEx and Zoom to deploy the Starland remote access trojan, stealing browser data, cryptocurrency wallets, and Active Directory credentials.
Identity-First Extortion: How the Helix Gang Uses Vishing and Device-Code Phishing to Steal SharePoint Data
A new data-extortion group called Helix is leveraging identity-focused attack techniques — voice phishing, device-code authentication abuse, and MFA hijacking — to compromise Microsoft 365 tenants and exfiltrate SharePoint data for ransom.