Identity Security Blogs

"Two AI ""hacks"" in September 2026 were blamed on rogue machines. See why both trace to human identity and access mistakes, and the controls that close the gaps."

Consumer AI agents can now book travel, buy goods, and make commitments. See why enterprises must verify delegated agent authority, not just the customer's session.

AI agent standards are still emerging. Learn how enterprises can secure AI agents now with OAuth, Cross-App Access, delegated authority, and governance.

See how an identity gateway helps government agencies protect legacy SAML systems, secure AI agents, and phase in post-quantum cryptography without a big-bang cutover.

AI agents now outnumber humans 45 to 1, yet most enterprises can't govern them. See why agent identity is the new security perimeter and how to control it.

YubiKey authentication gives enterprises phishing-resistant, hardware security key logins. Learn how it works and how to choose the best YubiKey for your teams.

Device ID is a unique hardware identifier that helps enterprises verify trusted devices, stop account takeover, and choose the best solution for security.

Risk-based authentication stops fraud without adding friction by scoring each login and stepping up verification only when a session looks risky. See how.

The first AI agent breach shows why identity design, runtime authorization, and governed non-human identities now decide the blast radius of attacks.