Identity Security stories

Stryker says a cyber attack disrupted internal systems, with investigators examining mobile device tools as experts warn of rising state-linked threats.

Sweep lands SailPoint, Wiz, Vanta and Varonis as security vendors seek tighter control and audit-ready visibility over Salesforce sprawl.

Upwind integrates its runtime cloud security with Azure, offering unified protection and Sentinel tie-ins via the Microsoft Marketplace.

Cloud identity compromise now drives over 80% of cyber incidents, as attackers increasingly abuse trusted accounts and workplace tools.

1Kosmos named overall, product and innovation leader in KuppingerCole's 2026 passwordless authentication ranking after review of 26 vendors.

Tech Mahindra and Rubrik unveil AI-powered cyber recovery service to speed post-ransomware restoration and cut operational downtime.

Tech Mahindra and Rubrik roll out AI-led cyber recovery service to speed clean data restoration and cut downtime after ransomware attacks.

Keeper Security has kicked off a global identity-first cybersecurity campaign as it enters a third season backing the Atlassian Williams F1 team.

Saviynt taps Exclusive Networks to distribute its identity security tools across APJ, targeting surging AI-driven machine identities.

Attackers are ditching malware for stolen identities, misconfigurations and abused AI tools, Google warns in its latest cloud threat report.

Saviynt taps distributor NEXTGEN to expand APAC and Japan identity security reach as non-human accounts surge and AI risks intensify.

Fortinet debuts cloud SOC preview and unified FortiEndpoint as it leans on agentic AI to automate security ops and cut endpoint sprawl.

SailPoint has added tools to govern AI agents, machine identities and privileged access as non-human accounts surge across cloud systems.

AI-native agents could quietly upend endpoint and SASE, eroding incumbents' telemetry moats as control shifts to the AI interaction layer.

SailPoint revamps its platform around AI-driven adaptive identity security, promising real-time governance for human and machine access.

Police and tech firms have dismantled Tycoon 2FA, a phishing service used to bypass MFA and hijack cloud accounts at industrial scale.

Hexnode launches device-aware IdP, fusing identity, UEM and real-time compliance checks to tighten access control and endpoint security.

ShinyHunters claims it hacked merchant data firm Woflow, raising supply chain fears for major brands despite no confirmed breach yet.

Misconfigured Microsoft 365 is leaving big organisations exposed, with 45% hit by incidents and many turning warily to AI for relief.

Delinea acquires StrongDM to fuse privileged access management with JIT runtime controls, targeting AI-era human and machine identities.