Identity Decoded

Practitioner intelligence on identity, AI agents, and enterprise trust.

LATEST ISSUES


Hackers Shipped a Backdoored Claude Code Update. It Had Anthropic's Real Name on It.

Hackers Shipped a Backdoored Claude Code Update. It Had Anthropic's Real Name on It.

The name on the update was real. The update wasn't. Now ask what that means for every AI tool you let into your computer.

identity-security

+6

One Saved Password Just Dumped 594,000 Florida DMV Files Online

One Saved Password Just Dumped 594,000 Florida DMV Files Online

Florida blames one police employee's login. The real problem is every agency holding a key to your driver record.

identity-security

+5

More Than 160 Companies Got Hacked by an App They Forgot They Approved

More Than 160 Companies Got Hacked by an App They Forgot They Approved

No password. No MFA. No person. One stolen app key opened at least 162 companies’ email, and many of them may never know what was read.

Microsoft 365

+5

AI Isn’t Rogue. It Has Your Keys.

AI Isn’t Rogue. It Has Your Keys.

OpenAI’s models broke into Hugging Face with no malicious intent. The real failure was the access left lying around.

OpenAI

+7

France's Tax Office Got Robbed With 30 Passwords. It Found Out When the Thief Bragged.

France's Tax Office Got Robbed With 30 Passwords. It Found Out When the Thief Bragged.

No zero-day. No genius. Just stolen passwords, missing MFA, and alarms nobody connected. Here's what France's official post-mortem reveals.

identity-security

+5

This Malware Has No Boss. Four AIs Vote on What It Steals Next

This Malware Has No Boss. Four AIs Vote on What It Steals Next

CLOSEDQUORUM skips the command server entirely. It asks DeepSeek, Qwen, Mistral and Gemini what to do, and majority rules.

Zero Trust

+6