Decentralized identity and verifiable credentials

Mini Shai-Hulud campaign hits 323 npm packages, GitHub Actions and VS Code tools.

ShinyHunters hit Canvas twice, exposing student data via XSS and identity compromise.

Teams warn the latest Shai-Hulud wave weaponizes trusted OIDC tokens to bypass package integrity checks.

SailPoint says GitHub repo breach exposed no customer data or production systems.

Nearly 9 in 10 security leaders struggle with identity sprawl as AI and NHIs expose governance gaps.

Govern business actions — not entitlements — to reduce risk and improve access control on z/OS and IBM i.

Ashish Jain explores why passkeys are ready for even the highest risk banking use cases.

Microsoft credential phishing weaponizes Bubble AI app builder AI-powered no-code app-building platform Bubble has been exploited to create illicit web apps that facilitate clandestine credential phishing intrusions against Microsoft accounts, BleepingComputer reports.