Hackers Accessed 5,000 Dropbox Accounts Through Lenovo ID Flaw

A Lenovo ID email verification flaw let attackers access about 5,000 Dropbox accounts without using the victims’ Dropbox passwords.

8 Customer Identity & Access Management (CIAM) Solutions: Our Top Picks by Use Case (2026)

Choosing customer identity? Our CIAM guide maps 8 picks — Auth0 for developers, Ping for scale, Stytch for fraud-aware flows — to your product and industry.

Add extra security to your SPA with DPoP and FusionAuth

To further protect users of your single-page application, sender-constrain your tokens with DPoP and FusionAuth's JS SDKs.

Why a Data Catalog Breach Is Different — And Why You Can't Just Rotate Your Way Out of It

Alation disclosed a breach; catalog metadata can map sensitive fields, data flows and service accounts, guiding attacks for years to come.

5 Warning Signs Your Company Has Outgrown Its Current Authentication Solution

Authentication debt doesn't announce itself with an outage. Here are five signs your identity layer has become a bottleneck instead of a foundation.

AI Is Exposing the Limits of Your Identity Infrastructure

Customer-facing AI doesn't just need a login. It needs identity infrastructure that can authorize, scope, and audit what an AI does on a user's behalf.

What is LLMjacking, and why should IT pros care?

As anybody who follows cybersecurity knows, when a new technology emerges, it’s usually followed by a threat actor trying to -jack it up. There’s clickjacking (tricking someone into hitting a...

The Convenience Trap in SaaS-Only Identity

SaaS-only identity removes operational work, but it can also quietly remove the architectural options a business will need later.

AWS Strands Agents Tools Received Four CVEs in 23 Days — And They All Share the Same Root Cause

Between July 15 and August 6, 2026, AWS Strands Agents Tools — the first-party tool package for the Strands Agents SDK — received four distinct security advisories. The vulnerabilities range from...

You Don't Own the Customer Experience If You Don't Control Identity

Companies obsess over every pixel of customer experience, then hand the login, recovery, and MFA flows to an identity provider's assumptions.

Homegrown Auth Is a Business Continuity Risk, Not Just a Security Risk

Homegrown authentication isn't only a security question. It's an availability, revenue, and continuity question that most companies underestimate.

Who Actually Owns Customer Identity in Your Organization?

Engineering, security, product, IT, compliance, support, and sales all touch customer identity. That's exactly why it needs a clear owner.

MCP Client Registration: Dinner Party Or Nightclub?

A practical guide to MCP client registration approaches: static pre-registration, Dynamic Client Registration, and Client ID Metadata Documents, which will help you choose the right method based on...

States, feds scramble to prevent more water cyberattacks

In the weeks after nine states were hit, lawmakers at the federal and state levels have proposed new funding to harden infrastructure, but experts warned they remain vulnerable.

Invisible AI Agents Creating New Enterprise Security Risks