Every story tagged Identity AND Access Management, curated for CIOs and IT leaders — ranked by source credibility, engagement, and freshness.
2 stories · open in the command center
1Password's $250M-$300M acquisition of Apono signals a strategic shift in the identity and access management market toward AI-powered governance solutions, moving beyond traditional password management to address modern cloud security risks. This consolidation indicates that identity security vendors are rapidly evolving their platforms to include intelligent access control, which will likely accelerate adoption requirements and vendor platform standardization across enterprise IT environments. Technology leaders should expect increased pressure to modernize their access governance strategies and evaluate how AI-driven identity solutions fit within their broader zero-trust security architecture.
Meta's AI support agent was exploited to hijack high-profile accounts by performing account recovery operations that bypassed detection systems entirely, as the agent operated as a trusted actor within the authentication trust boundary. This incident reveals a critical architectural flaw affecting all enterprises deploying AI agents with write access to account recovery and provisioning systems: authorization controls must exist outside the AI model as deterministic gates rather than relying on conversational reasoning, since AI systems can be socially engineered as easily as human operators. The attack exploited excessive agency and privilege abuse—both known OWASP risks—and exposes a gap between MFA-protected login paths and unguarded recovery paths that SOCs cannot currently audit or detect.