The shift to stolen sessions no one is talking about enough For years, cybersecurity conversations around identity risk have focused on one thing: Passwords. Weak passwords. Reused passwords. Breached passwords. But that focus is quickly becoming outdated. Today, one of the fastest-growing threats isn’t just stolen credentials, it’s stolen sessions ... Read More

Account takeover is no longer a perimeter problem Account takeover (ATO) has become one of the most persistent and costly forms of fraud. And yet, many organizations are still trying to solve it with the wrong tools. Traditionally, ATO prevention has relied on: Login monitoring Device fingerprinting Behavioral analytics MFA ... Read More

Intelligence without action doesn’t reduce risk Over the past few years, organizations have made significant investments in data and intelligence: Threat intelligence feeds Monitoring tools Identity data sources Risk scoring platforms But many are still facing the same problem: They have visibility, but not actionability. They know identities are exposed ... Read More

Recap of the live panel hosted by Constella and WMC Global on April 30, 2026 ▶  Watch the full recording If you’ve gotten a text recently warning you about an unpaid toll, a missed delivery, or suspicious activity on your bank account, you’ve interacted — however briefly — with one ... Read More

Introduction: Two terms, one growing confusion In cybersecurity conversations today, two terms are showing up more frequently: Threat Intelligence Identity Risk Intelligence At a glance, they sound similar. Both deal with data, risk, and security insights. But they solve fundamentally different problems. And understanding that difference is becoming critical because, ... Read More

Mobile fraud losses are projected to decline in 2026. That headline is technically accurate and deeply misleading. The fraud is not going away. It is changing channels, picking up speed, and getting harder to stop. The number looks like progress. Global subscriber losses from SMS fraud, smishing, account takeover, and ... Read More

Here Is What That Looks Like From an Investigator’s Perspective. The DPRK remote IT worker scheme is not a cybersecurity problem. It is an identity fraud problem at state scale. The tools that can detect and attribute it are the same tools built for investigating threat actors, not screening job ... Read More

The problem with how we monitor identity risk today For years, dark web monitoring has been positioned as the frontline defense against compromised credentials and identity exposure. If your data showed up on the dark web, you got an alert. If it didn’t, you assumed you were safe. That model ... Read More

Booking.com's breach exposed names, phone numbers, and booking details now being used in targeted WhatsApp phishing. Constella explains how the PII-to-smishing pipeline works and what to do about it ... Read More

A new category is emerging in cybersecurity For years, organizations have relied on monitoring tools to detect compromised credentials and exposed data. But as identity has become the primary attack surface, those tools are no longer enough. A new category is emerging in response: Identity Risk Intelligence This isn’t just ... Read More