Apples Acquires OPA Developers, Identity Debt, SSF and CAEP Final Spec, Veza QL

Quick Pick Vendor Updates

• Aembit: How AI Agents Are Creating a New Class of Identity Risk

• Apple: Apple Acquires Open Policy Agent Developers While CNCF Retains Control Of Open Source Project

• AWS: AWS IAM Identity Center introduces support for user background sessions with Amazon SageMaker Studio

• Beyond Trust: Machine PAM: What It Is and Why It Matters

• Delinea: Identity debt is the hidden risk you're already paying for

• HYPR: 8 Essential Questions for Your Workforce Identity Verification (IDV) Vendor

• Okta & Axiom Security: Delivering robust privileged access for modern infrastructure in the AI era

• Ping Identity: Ping Identity Unveils Just-in-time Privileged Access Capability to Empower Enterprises Across the Full Identity Lifecycle

• SGNL: SGNL welcomes the publication of the final Shared Signals and CAEP specifications!

• Veza: Introducing VQL – Veza Query Language

---

Identity Threat Intelligence Updates

• Researcher Exposes Zero-Day Clickjacking Vulnerabilities in Major Password

  Managers

• Another ECS Privilege Escalation Path

• Auth0 Security Detection Catalog

• OAuthSeeker: Leveraging OAuth Phishing for Initial Access and Lateral Movement on Red Team Engagements

• Cracking the Vault: how we found zero-day flaws in authentication, identity, and authorization in HashiCorp Vault

• Consent & Compromise: Abusing Entra OAuth for Fun and Access to Internal Microsoft Applications

• ECScape: Understanding IAM Privilege Boundaries in Amazon ECS

• Measuring Cyber Threat Intelligence Success

• Taking the biscuit: why hackers like cookies so much

• Jaguar Land Rover Shuts Down in Scramble to Secure 'Cyber Incident'

• Passkeys Are Not Broken. The Conversation About Them Often Is

---

Up Coming Industry Webinar:

• 17 September - Detect, Protect and Defend: A Holistic Approach to Human and Non-Human Identity Security with Permiso

---

Up Coming Conference Attendance:

• IAM Tech Day - Porto - Sept 23

• The Identity Underground Summit - Denver - Oct 6/7

• Future Identity Festival - London - Nov 10/11

• Blackhat EMEA - London - Dec 10/11

---

Latest Research Report:

• The Cyber Hut: A Market Guide to Identity Security Posture Management (ISPM): The Role of Data-Centric Identity Observability

---

Recent Insight and Comment:

• Comment on the role of IAM in Operational Technology for Industrial Cyber magazine

• Interview on Ep. 118 Identerati Office hours sponsored by Gluu (Future of IAM)

• Interview in Issue 02 IAM360 magazine by Thales (The new meaning of identity)

• Cheat Sheet: Top Metrics for B2E IAM

• Cheat Sheet: MCP Security

• Cheat Sheet: Agentic-AI Identity Security

• Migrating to Data-Centric ISPM

• Siloes of Failure: Identity as the Unifying Control

• Identity as a Big Data Problem

• Evolution to Detective Identity Security

• Trusted Computing: Emergence of a Vital Sector

---

Recent Industry Webinars

• Identity-First Security for AI Agents with Token Security

• Addressing the IAM Data Problem: A fireside chat with Radiant Logic

• An Identity Security Playbook: The What and The Why with Silverfort

• Putting the AI in IAM a fireside chat with Apono

• Too Many IDPs: Why Now, How to Rationalize?

• The First Step to Tackling the NHI Security Challenge

• Addressing Blind Spots in Identity Security for 2025

---

Recent Academy Episodes:

• 35: What are Initial Access Brokers?

• 34: What is SPIFFE?

• 33: What Role does AI play in IAM?

• 32: What is a Device Fingerprint?

• 31: What is Continuous Authentication?

• 30: What are Separation of Duties?

---

Recent Vendor Assessment Reports:

Recent Vendor Introduction Interviews:

---

Recent Podcast Episodes:

• E62 The Analyst Brief

• The Voice of Industry: Interview with Liv Horan IAM Recruitment Specialist

---

Order Recent IAM Books on Amazon:

• IAM at 2035: A Future Guide to Identity Security - Paperback, Audio, Kindle and Hardback

• CIAM Design Fundamentals - Paperback, Audio and Kindle