Identity & Access Management

BYOK was envisioned to reduce the risk of using a cloud service provider processing sensitive data, yet there are several deficiencies.

The popular pen-testing tool is often cracked and repurposed by threat actors. Google now has a plan to address that.

Hole-y software alert, Batman: Cybercriminal faves Citrix Gateway and VMware Workspace ONE have authentication-bypass bugs that could offer up total access to attackers.

New approaches to identity access management are indispensable.

This marks the third identity and access management (IAM) company acquired by Thoma Bravo in just the past few months.

Identity governance administration (IGA) started life as a tool for organizations to meet a sudden surge of legal and regulatory requirements, but it has grown into a key enabler of security.

About 1 in 5 phishing email messages reach workers' inboxes, as attackers get better at dodging Microsoft's platform defenses and defenders run into processing limitations.

The "ProxyNotShell" security vulnerabilities can be chained for remote code execution and total takeover of corporate email platforms.

Literacy, levels of personal freedom, and other macro-social factors help determine how strong average passwords are in a given locale, researchers have found.

The company's website remains offline after hackers used its compromised CMS to send out racist messages.

Why cyber teams are now front and center for business enablement within organizations, and the significant challenges they face.

Azure says cloud-native single sign-on with a passwordless option is most-requested new AVD feature in the product's history.

Cybercriminals took control of enterprise Exchange Servers to spread large amounts of spam aimed at signing people up for bogus subscriptions.

With the update, Microsoft adds features to allow easier deployment of zero-trust capabilities. Considering the 1.3 billion global Windows users, the support could make a difference.

The attack uses hijacked Egress branding and the legit Powtoon video platform to steal user credentials.