Browsing Category
Identity
67 posts
Security Point Break covers identity security, IAM and the technologies controlling who — and what — gets access to enterprise systems. Our reporting follows authentication, account recovery, passwordless security, OAuth, nonhuman identities, access management and identity-based attacks, with practical context for CISOs, security teams and technology leaders.
OAuth2 Proxy’s April Auth-Bypass Fix Didn’t Work: And Nobody’s Patched It Yet
A newly disclosed critical flaw shows an April fix for OAuth2 Proxy's login-bypass bug didn't stick.
One CVE, 2,500 Instances: Pi Researchers Find Flaw in AWS SDK
Pi Security researchers identified a critical AWS vulnerability allowing attackers to manipulate SDK region values, potentially compromising credentials, and discovered about 2,500 instances of this flaw across various implementations.
UK ID Verifier SQR Shuts Down Amid Funding Crunch
Isle of Man-based digital identity provider SQR is winding down after a funding round fell through, with executives blaming uncertainty in UK digital ID policy.
Black Hat 2026: Fighting an Adversarial Tsunami
Microsoft’s David Weston says AI is breaking the scarcity assumptions behind patch-and-detect security. His answer: Stop fighting bugs one at a time and start eliminating entire classes of failure.
Black Hat 2026: AI Breakouts, Identity Risk and After-Hours Vibes
By day, the security industry debates machine-speed attacks and collapsing trust boundaries. By night, cocktails, penthouse views and free sliders.
Facebook Rolls Out Real-Person Verification Badge
As generative AI makes fake profiles easier to produce, Meta is asking users to record a video selfie in exchange for a badge signaling they're a real person.
Google’s Fix for Account Recovery Will Cost You Your Face
Google introduces a selfie video feature for account recovery, allowing users to create a biometric reference for secure access. This method complements existing sign-in options, addressing recovery challenges.
Digital Age Verification: Ready or Not, Here it Comes
Laws and lawsuits are driving age verification tech, CEO of Voucher says.
Age Verification is Becoming the Internet’s Next Identity Fight
As states push platforms to prove who is old enough to access apps, social media and restricted content, the security challenge is shifting from simple age gates to privacy-preserving identity infrastructure.
NVIDIA Patches Critical Auth Bypass in AIStore Framework
NVIDIA has addressed a critical authentication-bypass vulnerability in its AIStore framework, which could enable data tampering and system disruptions, urging immediate updates.