Featured
Random thoughts on Identity and Access Management for Enterprises
Social media has worn me down to a nub, so what follows is merely me thinking aloud. No applause necessary, though I shan’t stop…
Read article →IAM 4 Enterprises
Unfiltered thoughts on IAM and IGA for Enterprises, humans and agents
Count your MCP servers before you secure them
An arXiv study submitted on 21 May identified 7,973 live remote MCP servers and found that 40.55% expose tools without authentication; it also tested…
Check your MCP Python SDK version
Cycode reported an OAuth account-takeover flaw in the official MCP Python SDK, fixed in versions 1.30.0 and 2.2.0. No CVE had been assigned as…
Start with the boring credentials
A community dataset from NHIMG covering 250 breaches says 114 of them, 46%, began with a leaked, stolen or weak credential. It fits neatly…
Payments joins the identity party
Visa, Mastercard and Ant International began a shared Know Your Agent effort on 10 September, and on 10 November the Linux Foundation launched the…
ID-JAG meets a rival: AAuth heads to OpenID
The OpenID Foundation’s AAuth working group published its agenda on 10 November, with its first meeting on 30 November, where it still has to…
Analyst season: a great many Leaders
Okta and Ping both say they were named Leaders in Gartner’s 2026 CIAM Magic Quadrant, and Palo Alto says the same of the PAM…
NewCore: ambitious, as only seed rounds are
NewCore raised $66M in June, a $16M pre-seed followed by an expanded seed, at a reported $300M valuation, and says it is going head-to-head…
Google takes its gateway across clouds
On 11 November Google Cloud put a cross-cloud Agent Gateway (covering EKS, AKS and OpenShift) into Limited Preview. Limited Preview is doing a lot…
Three agent identity providers in two months
Broadcom unveiled AgentMinder on 31 August, CrowdStrike announced its Agentic Identity Provider on 2 September, and IBM’s Agent Identity went generally available on 27…
Okta gives agent SSO away, pointedly
Agent SSO went generally available on 24 August, included in core Okta SSO plans at no additional cost, which makes agent identity a feature…