Identity Decoded

Practitioner intelligence on identity, AI agents, and enterprise trust.

LATEST ISSUES

AI Agents Just Broke Into 440 Companies in 48 Hours

AI Agents Just Broke Into 440 Companies in 48 Hours

A Russian-speaking threat actor pointed a swarm of AI agents at one PaperCut vulnerability — and beat human defenders to the finish line.

patch management

+6

Someone Just Minted Themselves Admin Access to Thousands of Companies

Someone Just Minted Themselves Admin Access to Thousands of Companies

A JFrog Artifactory bug lets attackers skip login entirely — and mint admin tokens for the software supply chain thousands of companies run on.

Software Supply Chain

+6

Someone Just Used AI to Break Into 10 Companies

Someone Just Used AI to Break Into 10 Companies

A ransomware crew turned a free coding assistant into an attack tool — and it never knew the difference.

Software Supply Chain

+5

I Won't Let My Kids on TikTok, Instagram Roblox. Here's the $400 Million Reason Why

I Won't Let My Kids on TikTok, Instagram Roblox. Here's the $400 Million Reason Why

An extra issue, off the usual format — on TikTok's $400M fine, Meta's $17.1B settlement, the Roblox lawsuits, and why I think age verification should be a condition of doing business, not a roadmap item.

tiktok

+9

Your AI Assistant Is Spying for Strangers

Your AI Assistant Is Spying for Strangers

Researchers turned Microsoft Copilot into a full reconnaissance tool using nothing but polite, innocent-sounding questions — and any AI assistant with broad access could do the same.

meta-hacking

+9

Firefox's Master Key Was Sitting on GitHub

Firefox's Master Key Was Sitting on GitHub

The signature that proves a Firefox update is real got exposed — and there's no way to know who saw it

Software Updates

+6