Cybersecurity articles tagged #Identity Security on RuntimeRebel.https://runtimerebel.comhttps://runtimerebel.com/blog/securing-agentic-ai-risks-of-over-privileged-identity-permissionshttps://runtimerebel.com/blog/securing-agentic-ai-risks-of-over-privileged-identity-permissionsAI agents that improvise to solve tasks pose significant security risks. Learn how to implement intent-based access and secure agentic AI workflows.Wed, 29 Jul 2026 14:13:24 GMTAI SecurityAgentic AIIdentity SecurityLeast PrivilegeMachine Identityhttps://runtimerebel.com/blog/solarwinds-arm-rce-via-cve-2024-28995-technical-mitigation-guidehttps://runtimerebel.com/blog/solarwinds-arm-rce-via-cve-2024-28995-technical-mitigation-guideCritical vulnerabilities in SolarWinds Access Rights Manager (ARM), including CVE-2024-28995, allow unauthenticated RCE. Update to version 2024.3 now.Fri, 24 Jul 2026 02:47:40 GMTSolarWindsAccess Rights ManagerCVE-2024-28995RCEDirectory TraversalIdentity Securityhttps://runtimerebel.com/blog/securing-critical-infrastructure-closing-identity-gapshttps://runtimerebel.com/blog/securing-critical-infrastructure-closing-identity-gapsAttacks on critical infrastructure leverage identity gaps. This analysis details common vulnerabilities and how Zero Trust principles can enhance sector security.Tue, 21 Jul 2026 17:24:12 GMTCritical InfrastructureIdentity SecurityZero TrustCredential TheftMFA BypassSupply Chain AttackPhishinghttps://runtimerebel.com/blog/defending-entra-id-lessons-from-breach-at-the-beach-ctfhttps://runtimerebel.com/blog/defending-entra-id-lessons-from-breach-at-the-beach-ctfAnalyze common Entra ID attack vectors including service principal abuse and privilege escalation techniques based on the Breach at the Beach CTF.Mon, 13 Jul 2026 14:42:13 GMTEntra IDAzure ADCloud SecurityVaronisIdentity Securityhttps://runtimerebel.com/blog/ai-agents-expand-attack-surface-managing-non-human-identitieshttps://runtimerebel.com/blog/ai-agents-expand-attack-surface-managing-non-human-identitiesAI agents accelerate non-human identity growth, creating security gaps. Proactive identity governance and visibility are crucial for defense.Fri, 10 Jul 2026 14:31:05 GMTAI AgentsNon Human IdentitiesIdentity SecurityAttack Surface ManagementNetwrixIdentity Governancehttps://runtimerebel.com/blog/digital-identity-security-investment-reflects-evolving-threat-landscapehttps://runtimerebel.com/blog/digital-identity-security-investment-reflects-evolving-threat-landscapeInvestment in digital identity security platforms highlights ongoing critical need for robust defense against modern cyber threats and data breaches.Thu, 09 Jul 2026 07:45:03 GMTIdentity SecurityDigital IdentityCybersecurity FundingAccess Managementhttps://runtimerebel.com/blog/cisco-secures-non-human-identity-with-astrix-and-widefieldhttps://runtimerebel.com/blog/cisco-secures-non-human-identity-with-astrix-and-widefieldCisco's acquisition of Astrix and WideField signals a strategic shift toward Non-Human Identity (NHI) as a critical control plane for securing cloud access.Sat, 27 Jun 2026 09:01:11 GMTCiscoAstrix SecurityWideFieldNon Human IdentityNHIIdentity SecurityCloud Securityhttps://runtimerebel.com/blog/cisco-acquires-widefield-security-to-advance-splunk-agentic-sochttps://runtimerebel.com/blog/cisco-acquires-widefield-security-to-advance-splunk-agentic-socCisco expands its security portfolio by acquiring WideField Security to integrate identity and session context into Splunk’s AI-driven Agentic SOC platform.Fri, 19 Jun 2026 09:45:25 GMTCiscoSplunkWideField SecurityAgentic SOCIdentity Securityhttps://runtimerebel.com/blog/shrinking-iam-attack-surface-via-identity-visibility-platforms-iviphttps://runtimerebel.com/blog/shrinking-iam-attack-surface-via-identity-visibility-platforms-ivipEnterprise security teams must tackle Identity Dark Matter using IVIP to eliminate blind spots in fragmented identity and access management environments.Wed, 03 Jun 2026 13:47:34 GMTIAMIVIPIdentity SecurityAccess ManagementIdentity Dark Matterhttps://runtimerebel.com/blog/ai-agent-identity-security-budget-dynamics-governance-prioritieshttps://runtimerebel.com/blog/ai-agent-identity-security-budget-dynamics-governance-prioritiesNew Omdia research reveals AI agent proliferation is fundamentally altering enterprise identity security budget dynamics, demanding distinct governance and management…Thu, 21 May 2026 20:41:56 GMTAI AgentsIdentity SecurityIAMGovernanceBudget DynamicsOmdiahttps://runtimerebel.com/blog/securing-identity-attack-paths-protecting-cached-aws-credentialshttps://runtimerebel.com/blog/securing-identity-attack-paths-protecting-cached-aws-credentialsAttackers exploit cached AWS access keys to achieve lateral movement. Learn how identity-based attack paths expose 98% of cloud entities and how to defend.Thu, 21 May 2026 13:17:05 GMTAWSIdentity SecurityCloud SecurityLateral MovementIAMhttps://runtimerebel.com/blog/reducing-phishing-exposure-strategies-for-rapid-evidence-recoveryhttps://runtimerebel.com/blog/reducing-phishing-exposure-strategies-for-rapid-evidence-recoveryLearn how SOC teams can close the visibility gap in phishing detection and use evidence-based analysis to prevent business disruption after a click.Mon, 18 May 2026 17:03:33 GMTPhishing PreventionSOC OperationsIncident ResponseIdentity Securityhttps://runtimerebel.com/blog/bypassing-ai-based-age-verification-via-facial-obfuscationshttps://runtimerebel.com/blog/bypassing-ai-based-age-verification-via-facial-obfuscationsResearch reveals that AI-driven age estimation systems can be bypassed using physical facial alterations, highlighting flaws in biometric verification models.Fri, 15 May 2026 12:49:02 GMTAge VerificationBiometricsAI VulnerabilitiesFacial RecognitionIdentity Securityhttps://runtimerebel.com/blog/microsoft-entra-id-flaw-agent-id-administrator-role-escalationhttps://runtimerebel.com/blog/microsoft-entra-id-flaw-agent-id-administrator-role-escalationMicrosoft patches a critical logic flaw in the Entra ID Agent ID Administrator role that allowed attackers to take over service principals and escalate privileges.Tue, 28 Apr 2026 08:56:27 GMTMicrosoft Entra IDSilverfortIdentity SecurityService PrincipalsAI Agent Securityhttps://runtimerebel.com/blog/robinhood-sign-up-flaw-used-for-phishing-injection-analysishttps://runtimerebel.com/blog/robinhood-sign-up-flaw-used-for-phishing-injection-analysisExploit of Robinhood's account creation process allowed attackers to inject phishing content into official emails, bypassing standard security filters.Tue, 28 Apr 2026 00:49:44 GMTRobinhoodPhishingInput ValidationEmail SpoofingIdentity Securityhttps://runtimerebel.com/blog/rituals-cosmetics-breach-my-rituals-database-pii-exposurehttps://runtimerebel.com/blog/rituals-cosmetics-breach-my-rituals-database-pii-exposureRituals Cosmetics discloses a data breach affecting its My Rituals membership database. Learn about the PII exposure, risk of credential stuffing, and mitigation.Thu, 23 Apr 2026 16:41:37 GMTRitualsPII TheftCredential StuffingIdentity SecurityRetail Cybersecurityhttps://runtimerebel.com/blog/defensive-strategies-for-routine-workflow-weaponizationhttps://runtimerebel.com/blog/defensive-strategies-for-routine-workflow-weaponizationAttackers are pivoting from technical exploits to weaponizing trusted workflows. Learn how to detect and mitigate these behavioral identity-based threats.Thu, 23 Apr 2026 12:30:57 GMTSocial EngineeringBusiness Email CompromiseIdentity SecurityBehavioral AnalyticsInsider Threathttps://runtimerebel.com/blog/identity-first-zero-trust-strategies-to-prevent-credential-thefthttps://runtimerebel.com/blog/identity-first-zero-trust-strategies-to-prevent-credential-theftLearn how Zero Trust architecture mitigates stolen credentials and lateral movement by enforcing device trust, least privilege, and continuous verification.Tue, 14 Apr 2026 16:32:08 GMTZero TrustIdentity SecurityCredential TheftLeast PrivilegeMFAhttps://runtimerebel.com/blog/detecting-credential-based-attacks-moving-beyond-signatureshttps://runtimerebel.com/blog/detecting-credential-based-attacks-moving-beyond-signaturesIdentity-based attacks leverage valid credentials to mimic legitimate activity, requiring a shift toward behavioral detection and identity-centric monitoring.Fri, 10 Apr 2026 20:14:30 GMTIdentity SecurityCredential TheftBehavioral AnalyticsMFA BypassITDRhttps://runtimerebel.com/blog/managing-recurring-credential-incident-risks-in-enterprise-environmentshttps://runtimerebel.com/blog/managing-recurring-credential-incident-risks-in-enterprise-environmentsAnalyze the financial and operational impact of recurring credential incidents, beyond the $4.4 million average breach cost cited in recent industry reports.Tue, 07 Apr 2026 12:27:43 GMTCredential StuffingIdentity SecurityBreach PreventionAccess Managementhttps://runtimerebel.com/blog/linx-security-boosts-identity-governance-solutions-with-50m-fundinghttps://runtimerebel.com/blog/linx-security-boosts-identity-governance-solutions-with-50m-fundingLinx Security secures $50M funding, accelerating product development and global reach for its identity security and governance platform, underscoring identity…Thu, 02 Apr 2026 04:49:49 GMTIdentity SecurityIdentity GovernanceCybersecurity InvestmentAccess ManagementFundinghttps://runtimerebel.com/blog/beyond-mfa-bridging-the-zero-trust-gap-in-session-securityhttps://runtimerebel.com/blog/beyond-mfa-bridging-the-zero-trust-gap-in-session-securityAuthentication alone does not equate to trust. Discover how session token hijacking bypasses MFA and why device health is critical for Zero Trust.Tue, 24 Mar 2026 16:29:03 GMTZero TrustMFA BypassSession HijackingIdentity SecurityDevice Trusthttps://runtimerebel.com/blog/rsac-2026-analyzing-pre-event-cybersecurity-vendor-announcementshttps://runtimerebel.com/blog/rsac-2026-analyzing-pre-event-cybersecurity-vendor-announcementsAnalysis of pre-event announcements for RSAC 2026, detailing the shift toward AI-driven security operations and unified identity-centric defense strategies.Mon, 23 Mar 2026 16:25:48 GMTRSAC 2026Security AutomationIdentity SecurityCloud Defensehttps://runtimerebel.com/blog/credential-theft-surge-understanding-infostealer-ai-social-engineeringhttps://runtimerebel.com/blog/credential-theft-surge-understanding-infostealer-ai-social-engineeringCredential theft surged in late 2025, driven by sophisticated infostealer malware and AI-enhanced social engineering.Wed, 18 Mar 2026 00:37:14 GMTCredential TheftInfostealerAI Social EngineeringIdentity SecurityAccount TakeoverSocial Engineeringhttps://runtimerebel.com/blog/remote-device-wiping-attack-hits-stryker-via-microsoft-environmenthttps://runtimerebel.com/blog/remote-device-wiping-attack-hits-stryker-via-microsoft-environmentAn attack on medical technology firm Stryker resulted in the remote wiping of tens of thousands of devices by leveraging internal management tools and identity.Mon, 16 Mar 2026 20:15:55 GMTStryker BreachMicrosoft IntuneRemote WipeMalwareless AttackIdentity Securityhttps://runtimerebel.com/blog/identity-prioritization-shifting-from-backlogs-to-risk-mathhttps://runtimerebel.com/blog/identity-prioritization-shifting-from-backlogs-to-risk-mathEnterprise identity programs must evolve from ticket-based prioritization to dynamic risk math models to manage the surge of human and non-human identities.Tue, 24 Feb 2026 12:20:29 GMTIAMIdentity SecurityRisk ManagementNon Human IdentitiesIdentity Threat Detection and Response