Latest from Identity Authority

Technical articles, standards guidance, and community insight on IAM, PAM, and Zero Trust.

green gradient background, "The Future of Application Security Is Already Here." and a read the report button.

All Teams4 IAM Architects59 Identity Governance Administrators14 CISOs & Security Leaders14 SecOps Engineers12 PAM Engineers10 IT Governance & Compliance Teams4 Cyber-Risk Analysts3 Directory Services Engineers1

Topics:All4 FIDO & Passkeys46 OAuth & OIDC18 Governance & Compliance11 Authorization Concepts9 Tokens & Sessions6 Identity Lifecycle5 Federation & SSO4 Multi-Factor Methods4 Directory Services3 Privileged Access3 Passwords & Hashing3 Access Control Models2 Zero Trust Architecture2 general1

4 articles in Multi-Factor Methods · Clear filtersSort byNewest·Trending

Session Hijacking After MFA: Questions Your Team Is Asking

Multi-Factor Methods

Latest

4 min read

Session Hijacking After MFA: Questions Your Team Is Asking

These questions started showing up in our security Slack channel after CloudSEK s BigBear 2.0 report landed. The operation harvested 5,137 credential records and 4,148 session cookies from 461 organiz

For Identity Governance AdministratorsRead article

Securing Connected Devices: Six Mistakes Teams Keep Making

Multi-Factor Methods

6 min read

Securing Connected Devices: Six Mistakes Teams Keep Making

Your authentication strategy was built for browsers, but your attack surface now includes cars, medical devices, and industrial controllers. This gap is where most teams fail. Why These Mistakes Keep

For IT Governance & Compliance TeamsRead

Authentication Is the Front Door Attackers Are Targeting

Multi-Factor Methods

5 min read

Authentication Is the Front Door Attackers Are Targeting

Scope This guide focuses on redesigning authentication systems when traditional layering fails to reduce risk. It s for IAM architects who need to shift from more authentication to building resilient

For IAM ArchitectsRead

Phishing Operators Shift to Device Code Attacks After Tycoon 2FA Takedown

Multi-Factor Methods

4 min read

Phishing Operators Shift to Device Code Attacks After Tycoon 2FA Takedown

What Changed In March 2026, law enforcement disrupted 330 domains linked to Tycoon 2FA, a major phishing kit in Okta s Identity Threat Protection telemetry. While detections initially dropped, they so

For IAM ArchitectsRead

Newsletter

Stay Ahead of Threats

Get weekly security insights and compliance updates delivered to your inbox.

Subscribe Now