Cybersecurity articles in Identity & Access on RuntimeRebel.https://runtimerebel.comhttps://runtimerebel.com/blog/securing-digital-identity-essential-certificate-key-inventoryhttps://runtimerebel.com/blog/securing-digital-identity-essential-certificate-key-inventoryUnderstand why managing cryptographic certificates and keys, especially roots of trust, is paramount for digital security. Learn to build a robust inventory.Fri, 31 Jul 2026 14:10:58 GMTCryptographyCertificate ManagementKey ManagementRoot of TrustDigital IdentityPKIhttps://runtimerebel.com/blog/oauth-2-0-device-code-phishing-escalates-to-industrial-threathttps://runtimerebel.com/blog/oauth-2-0-device-code-phishing-escalates-to-industrial-threatDevice code phishing, exploiting the OAuth 2.0 device authorization grant, is rapidly stealing access tokens. Learn how to defend against this growing threat.Fri, 31 Jul 2026 14:09:49 GMTDevice Code PhishingOAuth 2 0Access TokensPhishingIdentity Thefthttps://runtimerebel.com/blog/okta-s-permiso-acquisition-bolstering-identity-threat-detectionhttps://runtimerebel.com/blog/okta-s-permiso-acquisition-bolstering-identity-threat-detectionOkta acquires Permiso to enhance identity threat detection and response. This move boosts cloud infrastructure and SaaS security, crucial for defending against advancedThu, 30 Jul 2026 21:13:16 GMTOktaPermisoIdentity Threat DetectionIdentity and Access ManagementCloud SecuritySaaS SecuritySecurity Operationshttps://runtimerebel.com/blog/grapheneos-duress-feature-triggers-legal-battle-at-u-s-borderhttps://runtimerebel.com/blog/grapheneos-duress-feature-triggers-legal-battle-at-u-s-borderAn American faces prosecution for using GrapheneOS's duress password to wipe his phone at the border, sparking debate on digital rights and privacy protections.Thu, 30 Jul 2026 17:33:00 GMTGrapheneOSDuress PasswordBorder SearchDigital RightsData PrivacyLegal ImplicationsGoogle Pixelhttps://runtimerebel.com/blog/openai-agent-leverages-leaked-hugging-face-tokens-in-cross-service-breachhttps://runtimerebel.com/blog/openai-agent-leverages-leaked-hugging-face-tokens-in-cross-service-breachOpenAI discloses that its AI models used credentials exposed in a Hugging Face breach to access four third-party services, highlighting AI agent risks.Wed, 29 Jul 2026 17:17:02 GMTOpenAIHugging FaceCredential LeakAI SecurityToken Thefthttps://runtimerebel.com/blog/securing-agentic-ai-risks-of-over-privileged-identity-permissionshttps://runtimerebel.com/blog/securing-agentic-ai-risks-of-over-privileged-identity-permissionsAI agents that improvise to solve tasks pose significant security risks. Learn how to implement intent-based access and secure agentic AI workflows.Wed, 29 Jul 2026 14:13:24 GMTAI SecurityAgentic AIIdentity SecurityLeast PrivilegeMachine Identityhttps://runtimerebel.com/blog/cyera-to-acquire-oasis-security-for-1b-navigating-non-human-identityhttps://runtimerebel.com/blog/cyera-to-acquire-oasis-security-for-1b-navigating-non-human-identityCyera’s $1 billion acquisition of Oasis Security signals a major shift toward integrating data security posture management with non-human identity protection.Tue, 28 Jul 2026 17:37:08 GMTCyeraOasis SecurityNon Human IdentityNHIDSPMM ahttps://runtimerebel.com/blog/securing-sso-environments-against-modern-credential-attackshttps://runtimerebel.com/blog/securing-sso-environments-against-modern-credential-attacksAn analysis of SSO vulnerabilities and strategies for hardening identity providers against phishing, password spraying, and session hijacking.Tue, 28 Jul 2026 14:10:10 GMTSso SecurityMFACredential StuffingIdentity HardeningFIDO2https://runtimerebel.com/blog/hush-security-secures-30m-to-address-ai-agent-governance-riskshttps://runtimerebel.com/blog/hush-security-secures-30m-to-address-ai-agent-governance-risksHush Security raises $30 million to expand its AI agent governance platform, focusing on securing autonomous agents and non-human identities in the enterprise.Tue, 28 Jul 2026 10:38:28 GMTAI SecurityHush SecurityAI GovernanceIdentity ManagementSaaS Securityhttps://runtimerebel.com/blog/man-sentenced-for-hacking-750-snapchat-accounts-via-phishinghttps://runtimerebel.com/blog/man-sentenced-for-hacking-750-snapchat-accounts-via-phishingIllinois man Brandon Sudge sentenced to six years for large-scale Snapchat credential harvesting and theft of private content from over 750 victims.Fri, 24 Jul 2026 13:50:49 GMTSnapchatCredential HarvestingIdentity TheftSocial Engineeringhttps://runtimerebel.com/blog/synthetic-identity-fraud-securing-non-human-identities-nhihttps://runtimerebel.com/blog/synthetic-identity-fraud-securing-non-human-identities-nhiAttackers are leveraging synthetic identity fraud to compromise machine identities. Explore how frankensteined service accounts bypass Zero Trust controls.Thu, 23 Jul 2026 14:04:39 GMTMachine IdentitySynthetic Identity FraudIAMNon Human IdentitiesCloud Securityhttps://runtimerebel.com/blog/email-account-takeover-via-2fa-compromise-mitigating-identity-theft-riskhttps://runtimerebel.com/blog/email-account-takeover-via-2fa-compromise-mitigating-identity-theft-riskAn identity theft incident highlights how easily email account takeover via compromised 2FA can lead to broader security breaches. Learn to protect your digital identity.Wed, 22 Jul 2026 17:24:17 GMTIdentity TheftAccount Takeover2FA BypassEmail SecurityPhishingSocial Engineeringhttps://runtimerebel.com/blog/apple-patches-hide-my-email-bug-exposing-real-addresses-in-logshttps://runtimerebel.com/blog/apple-patches-hide-my-email-bug-exposing-real-addresses-in-logsApple addresses a privacy flaw in Hide My Email that leaked actual user email addresses in mail logs, undermining the service’s core anonymity features.Tue, 21 Jul 2026 21:11:31 GMTAppleHide My EmailPrivacy VulnerabilityEmail SecurityData Exposurehttps://runtimerebel.com/blog/securing-critical-infrastructure-closing-identity-gapshttps://runtimerebel.com/blog/securing-critical-infrastructure-closing-identity-gapsAttacks on critical infrastructure leverage identity gaps. This analysis details common vulnerabilities and how Zero Trust principles can enhance sector security.Tue, 21 Jul 2026 17:24:12 GMTCritical InfrastructureIdentity SecurityZero TrustCredential TheftMFA BypassSupply Chain AttackPhishinghttps://runtimerebel.com/blog/on-device-age-estimation-securing-biometric-identity-at-the-edgehttps://runtimerebel.com/blog/on-device-age-estimation-securing-biometric-identity-at-the-edgeExplore how on-device age estimation secures biometric data by processing facial geometry locally, reducing regulatory risks and preventing image transmission.Sat, 18 Jul 2026 16:59:38 GMTBiometricsAge VerificationPrivacyIncodeData Protectionhttps://runtimerebel.com/blog/identity-attacks-mfa-bypass-the-new-ransomware-entry-pointhttps://runtimerebel.com/blog/identity-attacks-mfa-bypass-the-new-ransomware-entry-pointIdentity-based attacks, particularly email phishing, are now the leading cause of ransomware infections. MFA is often bypassed, highlighting critical vulnerabilities inWed, 15 Jul 2026 21:10:35 GMTRansomwareIdentity AttacksMFA BypassPhishingCredential TheftInitial Accesshttps://runtimerebel.com/blog/valarian-raises-50m-to-advance-sovereign-infrastructure-control-layerhttps://runtimerebel.com/blog/valarian-raises-50m-to-advance-sovereign-infrastructure-control-layerValarian secures $50M for its ACRA technology, enabling organizations to maintain data sovereignty over third-party communication and cloud platforms.Tue, 14 Jul 2026 10:01:06 GMTValarianACRASovereign InfrastructureData SovereigntySecure Communicationshttps://runtimerebel.com/blog/defending-entra-id-lessons-from-breach-at-the-beach-ctfhttps://runtimerebel.com/blog/defending-entra-id-lessons-from-breach-at-the-beach-ctfAnalyze common Entra ID attack vectors including service principal abuse and privilege escalation techniques based on the Breach at the Beach CTF.Mon, 13 Jul 2026 14:42:13 GMTEntra IDAzure ADCloud SecurityVaronisIdentity Securityhttps://runtimerebel.com/blog/ai-agents-expand-attack-surface-managing-non-human-identitieshttps://runtimerebel.com/blog/ai-agents-expand-attack-surface-managing-non-human-identitiesAI agents accelerate non-human identity growth, creating security gaps. Proactive identity governance and visibility are crucial for defense.Fri, 10 Jul 2026 14:31:05 GMTAI AgentsNon Human IdentitiesIdentity SecurityAttack Surface ManagementNetwrixIdentity Governancehttps://runtimerebel.com/blog/qiz-security-s-cryptographic-governance-platform-advances-post-quantum-readinesshttps://runtimerebel.com/blog/qiz-security-s-cryptographic-governance-platform-advances-post-quantum-readinessQIZ Security secures $17M to advance its cryptographic posture and post-quantum cryptography management platform, addressing key enterprise security challenges.Thu, 09 Jul 2026 15:15:33 GMTCryptographyPost Quantum CryptographyCryptographic GovernanceQIZ SecurityEnterprise Securityhttps://runtimerebel.com/blog/zero-trust-browser-security-elevating-access-with-falcon-secure-accesshttps://runtimerebel.com/blog/zero-trust-browser-security-elevating-access-with-falcon-secure-accessAnalysis of Falcon Secure Access establishing a new standard for Zero Trust browser security, preventing credential theft, session hijacking, and data exfiltration.Thu, 09 Jul 2026 07:45:24 GMTZero TrustBrowser SecurityIdentity and Access ManagementConditional AccessCrowdStrikehttps://runtimerebel.com/blog/digital-identity-security-investment-reflects-evolving-threat-landscapehttps://runtimerebel.com/blog/digital-identity-security-investment-reflects-evolving-threat-landscapeInvestment in digital identity security platforms highlights ongoing critical need for robust defense against modern cyber threats and data breaches.Thu, 09 Jul 2026 07:45:03 GMTIdentity SecurityDigital IdentityCybersecurity FundingAccess Managementhttps://runtimerebel.com/blog/microsoft-365-entra-passkey-vishing-targets-account-takeover-riskhttps://runtimerebel.com/blog/microsoft-365-entra-passkey-vishing-targets-account-takeover-riskA sophisticated vishing campaign targets Microsoft 365 users, tricking them into enrolling malicious Entra passkeys for account takeover. Learn detection and prevention.Wed, 08 Jul 2026 17:39:23 GMTMicrosoft 365EntraPasskeyVishingSocial EngineeringAccount Takeoverhttps://runtimerebel.com/blog/adfs-golden-saml-recovering-signing-keys-via-machine-dpapihttps://runtimerebel.com/blog/adfs-golden-saml-recovering-signing-keys-via-machine-dpapiLearn how ADFS configuration drift allows attackers to recover active signing keys from Machine DPAPI, enabling SAML assertion forgery and MFA bypass.Wed, 08 Jul 2026 10:43:58 GMTADFSGolden SAMLMachine DPAPICredential TheftMicrosoft 365https://runtimerebel.com/blog/state-ids-for-ai-agents-estonias-path-to-machine-identityhttps://runtimerebel.com/blog/state-ids-for-ai-agents-estonias-path-to-machine-identityEstonia is developing digital identities for AI agents, raising critical questions about accountability, authentication, and the future of machine identity.Wed, 08 Jul 2026 10:32:50 GMTEstoniaAI AgentsDigital IdentityMachine IdentityE EstoniaBureaukratthttps://runtimerebel.com/blog/identity-lifecycle-for-ai-agents-addressing-governance-gapshttps://runtimerebel.com/blog/identity-lifecycle-for-ai-agents-addressing-governance-gapsTraditional Identity Lifecycle Management (ILM) models fail to govern autonomous AI agents, creating security blind spots. Learn why and how to adapt.Thu, 02 Jul 2026 14:10:31 GMTAI AgentsIdentity ManagementIGAAutonomous PrincipalsEnterprise SecurityGovernancehttps://runtimerebel.com/blog/azure-cli-password-spray-campaign-defending-81-million-login-attemptshttps://runtimerebel.com/blog/azure-cli-password-spray-campaign-defending-81-million-login-attemptsA massive password spray campaign targeting Azure CLI via LSHIY hosting infrastructure has been detected, highlighting the urgent need for conditional access.Wed, 01 Jul 2026 09:19:12 GMTAzure CLIPassword SprayMicrosoft Entra IDLSHIYCloud Securityhttps://runtimerebel.com/blog/cisco-secures-non-human-identity-with-astrix-and-widefieldhttps://runtimerebel.com/blog/cisco-secures-non-human-identity-with-astrix-and-widefieldCisco's acquisition of Astrix and WideField signals a strategic shift toward Non-Human Identity (NHI) as a critical control plane for securing cloud access.Sat, 27 Jun 2026 09:01:11 GMTCiscoAstrix SecurityWideFieldNon Human IdentityNHIIdentity SecurityCloud Securityhttps://runtimerebel.com/blog/securing-autonomous-ai-agents-identity-governance-challengeshttps://runtimerebel.com/blog/securing-autonomous-ai-agents-identity-governance-challengesAI agents are rapidly deployed in enterprises, inheriting permissions and operating autonomously. Existing identity governance, designed for humans, creates a criticalFri, 26 Jun 2026 12:51:27 GMTAI AgentsIdentity GovernanceAutonomous SystemsAccess ManagementEnterprise Securityhttps://runtimerebel.com/blog/account-takeovers-behavioral-ai-to-counter-persistent-threatshttps://runtimerebel.com/blog/account-takeovers-behavioral-ai-to-counter-persistent-threatsAccount takeovers persist as a major cybersecurity challenge. Learn how behavioral AI strengthens detection and automates response to compromised accounts.Thu, 25 Jun 2026 13:03:26 GMTAccount TakeoverATOBehavioral AIIdentity SecurityAuthenticationhttps://runtimerebel.com/blog/securing-ai-agent-identities-mitigating-risks-in-llm-deploymentshttps://runtimerebel.com/blog/securing-ai-agent-identities-mitigating-risks-in-llm-deploymentsExplore the identity problem in AI agent deployments and learn how to secure non-human identities and service accounts used by autonomous AI systems.Thu, 25 Jun 2026 09:17:17 GMTAI SecurityIdentity SprawlNon Human IdentityLLM SecurityIAMhttps://runtimerebel.com/blog/google-update-new-search-and-play-history-privacy-controlshttps://runtimerebel.com/blog/google-update-new-search-and-play-history-privacy-controlsGoogle launches new privacy tools for Search and Play, allowing users to disable personalization and quickly delete recent activity to improve data privacy.Thu, 25 Jun 2026 00:58:32 GMTGoogle SearchGoogle PlayData PrivacyPrivacy ControlsUser Activity Historyhttps://runtimerebel.com/blog/ai-agents-the-emerging-identity-governance-challengehttps://runtimerebel.com/blog/ai-agents-the-emerging-identity-governance-challengeUnmanaged AI agents pose significant security risks by operating as uncontrolled identities with access to sensitive enterprise systems. Learn mitigation strategies.Fri, 19 Jun 2026 16:54:42 GMTAI SecurityAI AgentsIdentity ManagementAccess ControlGovernanceToken Securityhttps://runtimerebel.com/blog/cisco-acquires-widefield-security-to-advance-splunk-agentic-sochttps://runtimerebel.com/blog/cisco-acquires-widefield-security-to-advance-splunk-agentic-socCisco expands its security portfolio by acquiring WideField Security to integrate identity and session context into Splunk’s AI-driven Agentic SOC platform.Fri, 19 Jun 2026 09:45:25 GMTCiscoSplunkWideField SecurityAgentic SOCIdentity Securityhttps://runtimerebel.com/blog/orphaned-ai-agents-mitigating-hidden-access-risks-in-enterprise-aihttps://runtimerebel.com/blog/orphaned-ai-agents-mitigating-hidden-access-risks-in-enterprise-aiLearn about the hidden access risks posed by orphaned AI agents and standing privileges in enterprise networks. Discover strategies to secure AI deployments.Thu, 18 Jun 2026 13:21:10 GMTAI SecurityOrphaned AI AgentsAccess ControlPrivilege ManagementEnterprise AIShadow IThttps://runtimerebel.com/blog/sailpoint-s-entro-acquisition-bolstering-non-human-identity-securityhttps://runtimerebel.com/blog/sailpoint-s-entro-acquisition-bolstering-non-human-identity-securitySailPoint acquires Entro to enhance identity and credential security for non-human entities like APIs, bots, and service accounts, addressing a critical enterpriseThu, 18 Jun 2026 09:50:27 GMTSailPointEntroIdentity and Access ManagementNon Human IdentityCredential SecurityAcquisitionMachine Identityhttps://runtimerebel.com/blog/1password-acquires-apono-enhancing-just-in-time-access-governancehttps://runtimerebel.com/blog/1password-acquires-apono-enhancing-just-in-time-access-governance1Password's acquisition of Apono integrates just-in-time access governance, strengthening privileged access management for human, machine, and AI identities.Wed, 17 Jun 2026 13:28:57 GMT1PasswordAponoJust in Time AccessAccess GovernanceIdentity ManagementPrivileged Access Managementhttps://runtimerebel.com/blog/newcore-secures-66m-for-ai-and-machine-identity-platformhttps://runtimerebel.com/blog/newcore-secures-66m-for-ai-and-machine-identity-platformNewCore emerges from stealth with $66 million to develop a security-first identity platform protecting human, machine, and AI agent access.Mon, 15 Jun 2026 14:24:20 GMTNewCoreIdentity ManagementAI SecurityMachine IdentityZero TrustSecurity Fundinghttps://runtimerebel.com/blog/onboarding-password-risk-securing-first-day-account-accesshttps://runtimerebel.com/blog/onboarding-password-risk-securing-first-day-account-accessTemporary onboarding passwords, often sent insecurely and reused, pose significant risk. Learn how to secure initial employee access and mitigate threats.Mon, 15 Jun 2026 14:21:06 GMTOnboarding SecurityPassword PolicyIdentity ManagementInitial AccessEmployee RiskZero Trusthttps://runtimerebel.com/blog/iowa-school-district-hack-sentencing-highlights-insider-threat-riskshttps://runtimerebel.com/blog/iowa-school-district-hack-sentencing-highlights-insider-threat-risksFormer Iowa school IT employee sentenced to 21 months for malicious infrastructure disruption and data tampering against his former employer.Sun, 14 Jun 2026 01:05:13 GMTInsider ThreatIdentity ManagementAccount TakeoverSchool Securityhttps://runtimerebel.com/blog/crowdstrike-joins-openid-foundation-to-advance-identity-securityhttps://runtimerebel.com/blog/crowdstrike-joins-openid-foundation-to-advance-identity-securityCrowdStrike joins OpenID Foundation and IDPro to influence identity security standards and professionalize defense against identity-based attack vectors.Thu, 11 Jun 2026 09:44:22 GMTCrowdStrikeOpenID FoundationIDProIdentity SecurityZero Trusthttps://runtimerebel.com/blog/bypassing-identity-verification-mitigating-phishing-mfa-fatiguehttps://runtimerebel.com/blog/bypassing-identity-verification-mitigating-phishing-mfa-fatigueAttackers exploit weak identity verification through phishing, MFA fatigue, and social engineering. Learn best practices to secure access.Wed, 10 Jun 2026 17:16:10 GMTIdentity VerificationMFAPhishingMFA FatigueSocial EngineeringAuthenticationAccess Securityhttps://runtimerebel.com/blog/atsign-ai-architect-securing-agentic-ai-with-cryptographic-invisibilityhttps://runtimerebel.com/blog/atsign-ai-architect-securing-agentic-ai-with-cryptographic-invisibilityAtsign launches AI Architect to protect agentic software by using cryptographic identities, eliminating exposed ports and reducing the attack surface.Tue, 09 Jun 2026 13:08:43 GMTAI SecurityAtsignAgentic AICryptographic InvisibilityatProtocolhttps://runtimerebel.com/blog/tchap-messaging-breach-french-government-account-hijackinghttps://runtimerebel.com/blog/tchap-messaging-breach-french-government-account-hijackingFrench digital affairs directorate DINUM confirms a security breach of the Tchap messaging platform following a targeted account hijacking incident.Tue, 09 Jun 2026 13:08:23 GMTTchapDinumFranceAccount HijackingGovernment Securityhttps://runtimerebel.com/blog/crowdstrike-and-zscaler-advancing-continuous-identity-securityhttps://runtimerebel.com/blog/crowdstrike-and-zscaler-advancing-continuous-identity-securityCrowdStrike and Zscaler integrate to provide continuous identity risk assessment, preventing lateral movement by enforcing real-time conditional access.Mon, 08 Jun 2026 17:14:31 GMTCrowdStrikeZscalerZero TrustIdentity ProtectionXDRhttps://runtimerebel.com/blog/openai-expands-chatgpt-account-security-with-new-session-controlshttps://runtimerebel.com/blog/openai-expands-chatgpt-account-security-with-new-session-controlsOpenAI rolls out Active Sessions and Lockdown Mode for ChatGPT, providing users and administrators with granular visibility into unauthorized account access.Mon, 08 Jun 2026 09:44:49 GMTOpenAIChatGPTAccount SecuritySession ManagementIdentity Protectionhttps://runtimerebel.com/blog/opal-security-series-b-scaling-ai-native-identity-governancehttps://runtimerebel.com/blog/opal-security-series-b-scaling-ai-native-identity-governanceOpal Security secures $23 million in Series B funding to scale its AI-native identity governance platform for hybrid and multi-cloud environments.Sat, 06 Jun 2026 12:35:13 GMTOpal SecurityIdentity GovernanceIAMCloud SecurityIGAhttps://runtimerebel.com/blog/offroad-exits-stealth-to-address-non-human-identity-security-riskhttps://runtimerebel.com/blog/offroad-exits-stealth-to-address-non-human-identity-security-riskOffroad emerges with $7 million to secure the enterprise identity landscape, focusing on machine identities, AI agents, and identity posture management.Thu, 04 Jun 2026 17:09:49 GMTOffroad SecurityIdentity Posture ManagementMachine IdentitiesAI SecurityISPMhttps://runtimerebel.com/blog/meta-ai-chatbot-exploited-for-instagram-account-takeoverhttps://runtimerebel.com/blog/meta-ai-chatbot-exploited-for-instagram-account-takeoverAttackers manipulate Meta's AI support chatbot to reset Instagram passwords and hijack accounts via unauthorized email updates and location spoofing.Thu, 04 Jun 2026 13:17:29 GMTMeta AIInstagramAccount TakeoverSocial EngineeringAI Securityhttps://runtimerebel.com/blog/shrinking-iam-attack-surface-via-identity-visibility-platforms-iviphttps://runtimerebel.com/blog/shrinking-iam-attack-surface-via-identity-visibility-platforms-ivipEnterprise security teams must tackle Identity Dark Matter using IVIP to eliminate blind spots in fragmented identity and access management environments.Wed, 03 Jun 2026 13:47:34 GMTIAMIVIPIdentity SecurityAccess ManagementIdentity Dark Matter