Topic
IAM is the field of technology and practice for verifying identities and controlling access, encompassing authentication and authorization.
Technical University of Denmark says a login with compromised credentials to its IAM system may have exposed data on up to 200,000 people. The records reach back to 2003, and active users' entries include CPR national ID numbers that DTU warns can be used for identity fraud.
Reality
MacPaw, the CleanMyMac maker, is launching Leebry, an AI platform for IT teams whose prototype resolved 30% of MacPaw's own level 1 tickets. Admins weighing it are working from MacPaw's own survey and MacPaw's own help desk, so a pilot on their own ticket queue is the evidence that counts.
Reality
Okta's forward earnings multiple went from about 18x to about 50x in five months while its full-year EPS guide rose about 2%. That ties the price as much to investors' view of AI security stocks as to Okta's own forward bookings.
Reality
Anthropic and OpenAI took a joint problem statement covering six agent authorization problems to the OAuth Working Group on September 28, 2026. A dev.to analysis of the session argues integration teams can fix the data model they own before any standard arrives.
Reality
Delinea's 2026 survey found 99.7% of IT and security leaders have a formal AI data policy, but only about 51% check AI access against it in real time. For responders, the shortfall comes after an agent starts acting: how fast out-of-scope access is seen, and how fast it is taken away.
Reality
PwC's survey of about 4,000 business and tech leaders found no agreed owner for AI risk, with the CIO or CTO the top answer at just 29%. Until that settles, the usable control is per agent: its own credential and one named owner.
Reality
Ping Identity has launched three agents that let Gemini Enterprise administrators reset passwords, end sessions and change access by typing a request. IT teams now have to decide whether a confirmation inside a chat window meets their change-control and audit rules.
Reality
GroundedDocs, a FastAPI RAG service, verifies Keycloak-signed tokens that expire in about 15 minutes and holds no key that can sign one. Keycloak now keeps the passwords and the signing key, so the identity provider becomes the system worth attacking.
Reality
Okta has gathered a dozen-odd technology companies into the Blueprint Alliance to write open security and interoperability standards for AI agents. The standards are still unwritten, and the six principles published so far are identity-management rules, the category Okta sells.
Reality
Microsoft will allow only scripts from its own CDN domains during Entra ID browser sign-ins under a Content Security Policy enforced from mid-October 2026. Browser extensions and tools that inject code into the sign-in page will stop working as the rollout completes in late October.
Reality
Okta and 11 vendors including AWS, Google Cloud and CrowdStrike signed six shared principles for securing AI agents under a new Blueprint Alliance. Buyers can put the list to vendors in procurement now, while Okta's release describes a reference architecture with no stated way to test compliance.
Reality
Microsoft shipped 22 updates, six of them scored 10.0, mostly in Entra ID, Exchange Online and Azure. Fixed server-side is not the same as verified in your tenant.
Perspective Coverage
5 publishersReality
A ReliaQuest employee gave up a password and an MFA push five days after the company named the .claims campaign. Device trust, not training, kept the session worthless.
Perspective Coverage
5 publishersReality
CVE-2026-18963 lets an unauthenticated request skip the emailed reset token entirely. Upstream 26.7.2 and four Red Hat errata are out, and the stopgap has to be set realm by realm.
Perspective Coverage
4 publishersReality
According to SecurityWeek, every technique in the chain was ordinary and the detection stack correlated it correctly. The time was lost in escalation, the part of the playbook most teams still size for an intruder working at human speed.
Reality
The flag rate on US-based remote IT roles climbed from 11% in the third quarter of 2024 to an estimated 47%, which prices candidate verification into every application even as venture money for identity startups fell to $0.3bn in a quarter.
Reality
Gartner surveyed 297 senior security leaders between March and May 2026 and found deepfaked video calls close behind at 36%. Its advice is to put a verification step in front of payment authorization, account recovery and privileged access.
Reality
Microsoft told admins on Friday that SMS first-factor sign-in retires from February 2027, and that its own SMS and voice delivery ends on February 1, so tenants that want to keep phone codes must buy telephony elsewhere.
Reality
ShareGate surveyed nearly 1800 IT professionals across nine countries and found 77% had a Microsoft 365 governance incident last year, with full Copilot deployments doubling to 56% of organisations over the same period.
Reality
Writing for the Forbes Technology Council, Proofpoint's Sumit uses three incidents since 2023 to argue that access control answers whether an action is allowed while agents need a check on whether it should happen at all.
Reality
Security · September 23, 2026 · 1 publisher
Security · September 22, 2026 · 1 publisher
Security · September 22, 2026 · 1 publisher
Product · September 22, 2026 · 1 publisher
Build · September 21, 2026 · 1 publisher
Build · September 21, 2026 · 1 publisher
Security · September 21, 2026 · 1 publisher
Security · September 21, 2026 · 1 publisher
Leadership · September 20, 2026 · 1 publisher
Leadership · September 20, 2026 · 1 publisher
Security · September 20, 2026 · 1 publisher
Security · September 19, 2026 · 1 publisher
Build · September 18, 2026 · 1 publisher
Build · September 18, 2026 · 1 publisher
Science · September 18, 2026 · 1 publisher
Build · September 18, 2026 · 1 publisher
Security · September 17, 2026 · 1 publisher
Build · September 17, 2026 · 1 publisher
Build · September 17, 2026 · 1 publisher
Security · September 17, 2026 · 1 publisher
Build · September 16, 2026 · 1 publisher
Leadership · September 14, 2026 · 1 publisher
Build · September 13, 2026 · 1 publisher
Build · September 13, 2026 · 1 publisher
Build · September 13, 2026 · 1 publisher
Security · September 11, 2026 · 1 publisher
Leadership · September 10, 2026 · 1 publisher
Security · September 10, 2026 · 2 publishers
Science · September 10, 2026 · 1 publisher
Invest · September 10, 2026 · 1 publisher
Build · September 9, 2026 · 1 publisher
Security · September 9, 2026 · 1 publisher
Security · September 9, 2026 · 1 publisher
Security · September 8, 2026 · 1 publisher
Build · September 8, 2026 · 1 publisher
Build · September 5, 2026 · 1 publisher
Security · September 3, 2026 · 1 publisher
Security · August 31, 2026 · 1 publisher
Security · August 26, 2026 · 1 publisher
Security · August 25, 2026 · 1 publisher