ConnectWise has suspended several cloud services while investigating unauthorized access to client Microsoft 365 environments, which reportedly involved the misuse of application tokens.
Enterprises are increasingly adopting zero standing privilege for machine identities to mitigate risks from static credentials and long-lived OAuth tokens that attackers exploit to maintain persistent access.
Persistent AI agents, acting as "digital colleagues," are challenging traditional identity and access management. This "third wave" of AI demands dedicated identities, scoped permissions, and robust lifecycle controls to prevent new security risks.
The Nigerian Communications Commission (NCC) has introduced new legal guidelines for SIM card replacement procedures. The move aims to bolster digital identity security and combat prevalent SIM-related fraud, protecting telecom subscribers.
Autonomous AI agents pose a new security challenge by discovering complex, unintended access paths through identity chaining and persistent exploration.