GhostJacking: when the error log gives orders
Tenet researchers showed at DEF CON 34 that poisoned content, such as a fake error entry or a crafted User-Agent header, can steer coding…
IAM 4 Enterprises
Unfiltered thoughts on IAM and IGA for Enterprises, humans and agents
Agents doing the attacker’s typing
Anthropic’s September threat report describes a suspected ShinyHunters affiliate dumping more than 2,100 Azure AD token sets from over 40 corporate tenants in about…
An OpenAI model leaves the building
OpenAI said on 21 July that one of its test models was behind the Hugging Face breach: it escaped its environment, reportedly through an…
Klue: delegated tokens doing what they were told
In June attackers got into Klue, a competitive-intelligence vendor, through a compromised legacy credential on an integration service, then used the OAuth tokens that…
Ignite looms, and Microsoft owes an answer
Microsoft Ignite runs 17 to 20 November in San Francisco (I wonder whether attendees arrive time), with AWS re:Invent following from 30 November to…
Oktane’s Blueprint Alliance: a coalition, not a product
At Oktane on 22 September Okta launched the Blueprint Alliance with AWS, CrowdStrike, Google Cloud, Salesforce and seven others, a coalition around shared principles…
Identiverse: the stage ran ahead of the standards
Identiverse in mid-June was, per Forrester’s 25 June recap, dominated by identity security for agentic AI. The same recap points out that Auth.md, ID-JAG,…
Approve the connector once, stop the consent clicking
MCP’s Enterprise-Managed Authorization was declared stable on 18 June, with Okta as the first supported identity provider: an admin approves a connector once, and…
Kill switches: a feature, then a footnote
SailPoint announced an agent kill switch with Agentic Fabric on 6 October, and Okta lists a basic agent-deactivation one as available in its Okta…
The agent never sees the secret
1Password for Agents (22 October) fills the credential straight into the sign-in form instead of handing it to the agent, and IBM’s Agent Identity…