Identity Security

Machine identities — service accounts, API keys, certificates, tokens and workload identities — now outnumber human ones by a wide margin and are a leading breach vector. What they are, why they are hard to govern, and a practical control programme.

Check Point reports a fast-growing phishing campaign that abuses legitimate calendar features — malicious .ics attachments and fake Microsoft Teams invites — to steal Microsoft 365 credentials, with more than 302,386 unique phishing emails hitting over 40,000 organizations and volume climbing from a few thousand a month in April to more than 740,000 in the first two weeks of October. This is not a flaw in Outlook, Teams or the .ics format; it is the abuse of trusted calendar behaviour. A third-party, figures-attributed read of what the campaign is, why calendar invites bypass normal phishing instincts, and the defensive playbook for security leaders. Every number is attributed to Check Point.

Hacktron chained a libheif overflow, RCE on community.openai.com, and an SSO flaw into ChatGPT/Codex takeover and internal repo access in under 72 hours.

CVE-2026-76460 is a CVSS 10.0 authentication bypass in Cisco ISE, under active exploitation with no workaround. Affected versions, patches, and detection.

A concrete, admin-ready guide to hardening Microsoft Teams: external access and federation controls, guest and app governance, meeting policies, phishing defense, token-theft and Conditional Access, DLP, and Purview monitoring.

A concrete SOC and IAM watch-list of the behaviours and attributes — impossible travel, MFA changes, privilege escalation, leaked credentials and more — that should raise a user's risk score, why each matters, and how to respond.

A CISO and IAM architect's guide to FIDO2, WebAuthn, and passkeys: why they are phishing-resistant, platform vs hardware and device-bound vs synced options, attestation and AAGUID, and an assessment checklist for deployment.