Identity

Mastering Identity Security: Your Resource for IAM, Governance, Access, and More.

A dozen androids and robots tell each other exciting news via telephone.

From M2M to A2A: Why your identity stack wasn’t built for what’s coming

Paul WagenseilJune 26, 2026

The shift from M2M to A2A communication heralds an entirely new operational model for enterprise computing.

Today's Top Identity Headlines

Identity News

AI/ML

Mastering agent permissions and Identiverse interviews – Amir Ofek, Howard Ting, Ajay Gupta, Sandy Bird – ESW #466

July 6, 2026

Interview with Sandy Bird, co-founder of Sonrai Security. In this week's interview, we kick off the conversation with how Sonrai's expertise in securing cloud identity permissions had the company well placed to address the explosion of AI agents and the clear risks they represented. On the surface, this looks like a cloud/hyperscaler permissions ch...

Digital login interface with data network connections and abstract code

Identity

Microsoft Azure’s CLI target of automated password spray attacks

Steve ZurierJuly 1, 2026

Huntress researchers saw 78 user accounts compromised across 64 organizations.

Application security

Reducing Attack Surface & Evaluating Efficiency in Agents – Itamar Apelblat, David Goldschlag – ASW #389

June 30, 2026

SquidBleed reveals another vuln that's been lurking for decades, but its real lesson is in managing an attack surface. Regardless of whatever programming language you use, removing code is one of the best security steps you can take, followed by changing default configs to turn off uncommon features and ancient protocols. The Linux kernel's removal...

A user interacts with a laptop, surrounded by holographic icons representing security and digital privacy. This image captures modern technology in action.

AI/ML

How to defend at machine speed: A post-LLM era playbook

Picus SecurityJune 1, 2026

AI-era attacks now move at machine speed, forcing defenders to rethink validation and response.

Application security

How AI Is Reshaping Identity Security at the Infrastructure Layer – Ev Kontsevoy, Neha Duggal, Amit Masand – ASW #388

June 23, 2026

Appsec has seen machine identities from daemons and processes to services, microservices, and cloud accounts. And now we have agents. Ev Kontsevoy talks about what it means to have engineers and agents interacting in an environment, and why a focus on actions can be more effective than roles. One of the biggest challenges in securing agents along w...

Ransomware

LLMS, Identity, EDR, JiGong, QiLin, Warlock, with Rob Allen from Threatlocker… – Rob Allen – SWN #591

June 19, 2026

Doug and Rob Allen talk about Identity, EDR, Your Great Aunt Ida Meets some hot firefighters, and more. Segment Resources: Qilin and Warlock Ransomware Use Vulnerable Drivers to Disable 300+ EDR Tools: https://thehackernews.com/2026/04/qilin-and-warlock-ransomware-use.html. This segment is sponsored by ThreatLocker. Visit https://securityweekly.com...

Identity

Blended Identities and the challenge of IAM for AI – David Goldschlag – IDV26 #1

June 16, 2026

AI agents aren't quite human and aren't traditional machines. So how do you secure workflows that involve humans using AI to access sensitive data, and do it at machine speed and scale? David breaks down the challenges and discusses actual implementations of IAM for AI to explain how to solve them. Segment Resources: https://aembit.io/case-study/a-...

Identity

2026 Identity Security: Governing AI agents, NHIs and MCP access

Who Is Responsible for an AI Agent’s Actions? – Neha Duggal – IDV26 #1

June 16, 2026

As AI agents gain the ability to access systems, invoke tools, and take action on behalf of users, organizations need clear frameworks that define responsibility for machine-driven decisions and outcomes. This segment examines how accountability, delegation, and attribution can be established across users, developers, security teams, and business s...

Governance, Risk and Compliance

Agentic AI Has an Identity Problem – Itamar Apelblat – IDV26 #1

June 16, 2026

AI agents are already running inside enterprise environments, operating on credentials, API tokens, and cloud roles that most security teams have never inventoried. When an agent acts autonomously across production systems, the security question is no longer just what it can do but who it is and whether that identity is governed at all. Itamar Apel...

Get weekly updates

The most current cybersecurity news involving identity & access.

Identity

From M2M to A2A: Why your identity stack wasn’t built for what’s coming

Today's Top Identity Headlines

Massive password spray attack targets Azure CLI, bypasses MFA

Microsoft Teams enhances bot protection with human verification

WhatsApp introduces usernames to enhance user privacy

Supreme Court limits geofence search warrants, bolsters privacy rights

Identity: Explained and Explored

The identity crisis at the heart of AI regulation

Five nines and the SaaSpocalypse: Why credential security survives the AI reset

Your AI agent can’t be authenticated by a password reset email

No more blind trust: Identity controls for AI agents

4 ways to protect the company against vishing attacks

Attackers stopped fighting MFA. They are now targeting the enrollment step nobody monitors.

Lessons from Identiverse 2026

Identity is the foundation of trust. That makes it everyone’s problem.

Identiverse 2026: Everyone wants an AI assistant. Few are ready to govern one

Identiverse 2026: Blended Identities and the challenge of IAM for AI

Identity News

Mastering agent permissions and Identiverse interviews – Amir Ofek, Howard Ting, Ajay Gupta, Sandy Bird – ESW #466

Microsoft Azure’s CLI target of automated password spray attacks

Reducing Attack Surface & Evaluating Efficiency in Agents – Itamar Apelblat, David Goldschlag – ASW #389

How to defend at machine speed: A post-LLM era playbook

How AI Is Reshaping Identity Security at the Infrastructure Layer – Ev Kontsevoy, Neha Duggal, Amit Masand – ASW #388

LLMS, Identity, EDR, JiGong, QiLin, Warlock, with Rob Allen from Threatlocker… – Rob Allen – SWN #591

Blended Identities and the challenge of IAM for AI – David Goldschlag – IDV26 #1

2026 Identity Security: Governing AI agents, NHIs and MCP access

Who Is Responsible for an AI Agent’s Actions? – Neha Duggal – IDV26 #1

Agentic AI Has an Identity Problem – Itamar Apelblat – IDV26 #1

Get weekly updates

Identity Events

The identity evolution that enables AI confidence

IAM for MSSPs: Real-World Deployments

Privilege risk is in the lifecycle: A CISO discussion on modernizing identity control

The industrialization of identity compromise

Rethinking identity security for a borderless attack surface

Identity and access

Identity

From M2M to A2A: Why your identity stack wasn’t built for what’s coming

Today's Top Identity Headlines

Massive password spray attack targets Azure CLI, bypasses MFA

Microsoft Teams enhances bot protection with human verification

WhatsApp introduces usernames to enhance user privacy

Supreme Court limits geofence search warrants, bolsters privacy rights

Identity: Explained and Explored

Identity News

Mastering agent permissions and Identiverse interviews – Amir Ofek, Howard Ting, Ajay Gupta, Sandy Bird – ESW #466

Microsoft Azure’s CLI target of automated password spray attacks

Reducing Attack Surface & Evaluating Efficiency in Agents – Itamar Apelblat, David Goldschlag – ASW #389

How to defend at machine speed: A post-LLM era playbook

How AI Is Reshaping Identity Security at the Infrastructure Layer – Ev Kontsevoy, Neha Duggal, Amit Masand – ASW #388

LLMS, Identity, EDR, JiGong, QiLin, Warlock, with Rob Allen from Threatlocker… – Rob Allen – SWN #591

Blended Identities and the challenge of IAM for AI – David Goldschlag – IDV26 #1

2026 Identity Security: Governing AI agents, NHIs and MCP access

Who Is Responsible for an AI Agent’s Actions? – Neha Duggal – IDV26 #1

Agentic AI Has an Identity Problem – Itamar Apelblat – IDV26 #1

Get weekly updates

Identity Events

The identity evolution that enables AI confidence

IAM for MSSPs: Real-World Deployments

Privilege risk is in the lifecycle: A CISO discussion on modernizing identity control

The industrialization of identity compromise

Rethinking identity security for a borderless attack surface