Researchers have uncovered new attack vectors that can undermine passkey authentication, challenging the idea that passwordless automatically means attack-proof. The attacks focus on weaknesses around the authentication flow and implementation, rather than breaking the underlying cryptography. Manipulation of WebAuthn processes, fallback mechanisms and compromised environments can potentially allow attackers to bypass or weaken passkey protection. […]
AI agents challenge traditional IAM by acting at machine speed and scale, with unpredictable access patterns that human-centric security models weren’t designed for. Prompt injection, credential exposure and multi-agent delegation create attack paths that conventional authentication and authorization controls struggle to govern. Existing behavioral monitoring can be effectively blind to autonomous agents, while ownership, accountability, […]
Gartner sees Verifiable Credentials (VCs) and decentralized identity as transformational technologies poised to reshape digital identity across industries. VCs enable standardized, secure and compliant data exchange between multiple parties at lower cost and higher speed. Instead of repeatedly proving identity, users can receive verified credentials once and reuse them cryptographically across services and transactions. Decentralized […]