IAM Technologies

A highly sophisticated and industrialized cybercrime operation is threatening the 2025 holiday shopping season with a massive network of fraudulent retail websites, Cyber Security News reports.

Several threat clusters were identified by Proofpoint, including the financially motivated group TA2723.

Over 1,800 suspected North Korean scammers had their attempts to obtain remote IT work at Amazon quashed since April 2024 as the firm recorded a 27% quarter-over-quarter increase in North Korea-linked job applications, The Register reports.

BleepingComputer reports that automated credential-based intrusions were launched against Palo Alto Networks GlobalProtect and Cisco SSL VPN instances last week.

The UK's Information Commissioner's Office issued a 1.2 million penalty to password management company LastPass' British subsidiary following a 2022 security breach, reports The Record, a news site by cybersecurity firm Recorded Future.

Holiday sales can crash when mismanaged credentials cause outages, delays, and security risks.

This episode was about agentic IAM—what it is and the risks that come with letting non-human agents act for customers. We defined external IAM, then traced how the industry moved from basic login and MFA to consent, delegation, and now agent-to-agent interactions. Along the way we unpacked key risks for CISOs and practitioners to consider. Segment...

A new report from Entrust warns that identity fraud is rapidly escalating in scale and sophistication, driven by the widespread adoption of artificial intelligence to create deepfakes and bypass biometric security, according to Security Brief Australia.