Identity and Access Management

Why AI agents are like the dog that pushed kids into the Seine

Six common ways AI agents lose the plot.

By Etay Maor

1 Oct 20266 mins

Access ControlData and Information SecurityIT Governance

The MFA you have isn't the MFA you think you have

By Ashish Mishra

30 Sep 20266 mins

Access ControlAuthenticationMultifactor Authentication

Autonomous agents attack Azure using compromised identities, destroying resources

By Gyana Swain

28 Sep 20266 mins

Artificial IntelligenceCloud SecurityIdentity and Access Management

Articles

AI agent authorization risks remain a gap in new NIST-CISA token security guidance

Stronger monitoring, shorter-lived tokens, and tighter controls over how tokens are used after authentication are needed as AI agents complicate who and what enterprises can trust inside their systems.

By Prasanth Aby Thomas

16 Sep 2026 5 mins

APIsAccess ControlSingle Sign-on

Exaforce extends its AI security tool to monitor more than just Claude

The new offering correlates AI-agent activity with endpoint, identity, cloud, SaaS and code data to help security teams detect and respond to threats.

By Shweta Sharma

15 Sep 2026 5 mins

Artificial IntelligenceIdentity and Access ManagementSecurity Software

Researchers warn that trusted AI agents can act as proxies for privileged accounts when user permissions are not enforced downstream.

By Gyana Swain

10 Sep 2026 5 mins

Access ControlAuthenticationIdentity and Access Management

Securing AI agents: Key controls and best practices

Unchecked AI agents might be your worst insider threats. Security practitioners offer real-world insights on how security teams can reduce the risk and impact of rogue agent activity.

By Lucian Constantin

8 Sep 2026 11 mins

Access ControlIdentity and Access ManagementRisk Management

ZTNA: The New Way to Secure Remote Workers and the Cloud

Traditional perimeter-based security doesn’t translate to the new cloud and remote worker models. Increasingly, enterprises are investigating zero trust as an alternative or complementary method.

By Hillstone Networks

5 May 2022 4 mins

Zero Trust

Zero trust has a big AI agent problem ahead

Zero trust assumes everyone is an attacker until proven otherwise. But when your enterprise is swarming with unknown autonomous agents, that is tricky if not impossible.

By Evan Schuman

3 Sep 2026 7 mins

Access ControlIdentity and Access ManagementZero Trust

Exploited JFrog Artifactory bug puts software supply chain on alert

The bug is already being exploited in the wild, allowing attackers to generate admin tokens and gain access to Artifactory, the platform that powers many organization’s software supply chains.

By Shweta Sharma

2 Sep 2026 3 mins

Access ControlAuthenticationVulnerabilities

Microsoft nudges enterprise security closer to its passwordless future. But ‘123456’ will survive.

Microsoft backing passkeys for cloud authentication will spur adoption of passwordless technology, but most enterprises will continue with a hybrid authentication approach.

By John Leyden

1 Sep 2026 6 mins

Access ControlAuthenticationPasswords

Who is accountable when your AI agent goes rogue?

Recent high-profile incidents should give IT leaders pause about the accountability gaps their enterprises — and they themselves — face should their AI agents escape their controls.

By Lucian Constantin

26 Aug 2026 14 mins

Access ControlIdentity and Access ManagementLaws and Regulations

Citrix issues critical security updates for its NetScaler devices

A memory overflow vulnerability and an authentication bypass both require urgent attention.

By Evan Schuman

21 Aug 2026 5 mins

Access ControlAuthenticationIdentity and Access Management

Security leaders’ rogue AI confidence could actually be disastrous

IT and security leaders believe they can detect when an AI agent malfunctions or operates out of scope, but few can quickly trace and contain the cascading impact.

By Grant Gross

11 Aug 2026 6 mins

Access ControlApplication SecuritySecurity Monitoring Software

Two campaigns created 4M+ fake identities to enumerate Microsoft Entra ID accounts — without logins. Learn how to detect the behavior, not the threat.

By Sunil Gentyala

10 Aug 2026 8 mins

CybercrimeHackingThreat and Vulnerability Management

Enterprise passkey security under threat from malware

Trusted workflows can be misused to take over passkey-protected accounts if an attacker can first breach enterprise defenses and plant malware, researchers found; analysts say the issue is flaws in passkeys' supporting processes.

By Evan Schuman

6 Aug 2026 6 mins

CyberattacksCybercrimeIdentity and Access Management