For years, workforce identity was treated as a solved problem. Organizations invested heavily in Zero Trust strategies, deploying single sign-on (SSO), multi-factor authentication (MFA), privileged access management, and passkeys to strengthen security ...

I’ve been going to RSA for over a decade now. Long enough to spot the cycle.This year the theme was AI — and it was everywhere. Every booth, every pitch, every keynote, ...

The security industry has a habit of talking itself out of progress. We identify the right solution, validate the technology, get regulatory endorsement — and then spend the next three years relitigating ...

In May of 2024, Microsoft first introduced the launch of External Authentication Methods (EAM) for Entra ID users. As a close partner, HYPR had worked closely with Microsoft on the new offering ...

From Identity Renaissance to the Age of Industrialization In last year'sState of Passwordless Identity Assurance report,we declared an Identity Renaissance—the turning point where enterprises recognized that passwords and shared secrets were fundamentally ...

In our opinion, Gartner’s 2026 research reflects this broader evolution. Identity has expanded beyond perimeter controls and point-in-time authentication to encompass verification of the human, contextual risk assessment, and automated trust decisions ...

From hiring and onboarding fraud to service desk social engineering, attackers increasingly exploit identity workflows with stolen identities, forged documents, and deepfake-enabled impersonation. Gartner® warns that “by 2028, one in four candidate ...

Vishing as the Front Door to MFA Bypass Threat reporting tied to ShinyHunters and Scattered Spider-linked activity shows voice phishing (vishing) being operationalized as a coordinated access vector against enterprise identity systems ...

Voice Phishing Attack, As Executed By Your Niece Here’s how your niece, let’s call her Mary, actually executes these attacks in practice: ...

One thing I’ve learned building authentication products is this: security doesn’t fail because teams make bad architectural decisions. It fails because real people are just trying to get their work done.Authentication lives ...