Browsing Category
Identity
60 posts
Security Point Break covers identity security, IAM and the technologies controlling who — and what — gets access to enterprise systems. Our reporting follows authentication, account recovery, passwordless security, OAuth, nonhuman identities, access management and identity-based attacks, with practical context for CISOs, security teams and technology leaders.
Eight Vendors Weigh In on Controlling AI
The AI doomsday debate emphasizes operational chaos over existential threats. Experts discuss integrating AI governance to address vulnerabilities in cyber systems, advocating for diverse control mechanisms and layered security perspectives.
Who Gets to Control the AI Agent?
Agent control planes are already arriving. Identity vendors, hyperscalers, data platforms, gateways and security companies are staking claims over where the controls belong - and who gets the final say when autonomous software acts.
Feds Make Login.gov Mandatory: Fraud Gaps Persist
Login.gov is becoming the federal front door for taxes, benefits and public services, even as GSA works to close fraud gaps and fix longstanding technical problems.
OAuth2 Proxy’s April Auth-Bypass Fix Didn’t Work: And Nobody’s Patched It Yet
A newly disclosed critical flaw shows an April fix for OAuth2 Proxy's login-bypass bug didn't stick.
One CVE, 2,500 Instances: Pi Researchers Find Flaw in AWS SDK
Pi Security researchers identified a critical AWS vulnerability allowing attackers to manipulate SDK region values, potentially compromising credentials, and discovered about 2,500 instances of this flaw across various implementations.
UK ID Verifier SQR Shuts Down Amid Funding Crunch
Isle of Man-based digital identity provider SQR is winding down after a funding round fell through, with executives blaming uncertainty in UK digital ID policy.
Black Hat 2026: Fighting an Adversarial Tsunami
Microsoft’s David Weston says AI is breaking the scarcity assumptions behind patch-and-detect security. His answer: Stop fighting bugs one at a time and start eliminating entire classes of failure.
Black Hat 2026: AI Breakouts, Identity Risk and After-Hours Vibes
By day, the security industry debates machine-speed attacks and collapsing trust boundaries. By night, cocktails, penthouse views and free sliders.
Facebook Rolls Out Real-Person Verification Badge
As generative AI makes fake profiles easier to produce, Meta is asking users to record a video selfie in exchange for a badge signaling they're a real person.
Google’s Fix for Account Recovery Will Cost You Your Face
Google introduces a selfie video feature for account recovery, allowing users to create a biometric reference for secure access. This method complements existing sign-in options, addressing recovery challenges.