Astrix and State of MCP Security, Saviynt new AI, Silverfort Strategy Update

This Weeks Mystical Quartet

Curated Industry Headlines

• Astrix: State of MCP Server Security 2025

• Auth0: Understanding ReBAC and ABAC Through OpenFGA and Cedar

• AWS: Securing AI agents with Amazon Bedrock AgentCore Identity

• Gathid: Mitigating Identity Risks: Managing Access Across Diverse Systems

• Imprivata: Imprivata Acquires Verosint to Add AI-Powered Risk Signaling to its Leading Enterprise Access Management Platform

• Saviynt: Saviynt Unveils Major AI Capabilities for Identity Security

• SGNL: Deployment Guide: Securing GitHub with SGNL

• Silverfort: Breaking silos to deliver one platform for end-to-end Identity Security

• Veza: Risk-Based Access Reviews and Recertifications

---

Identity Threat Intelligence Updates

• Crowdstrike: 2025 APJ eCrime Landscape Report: A New Era of Threats Emerges

• MFASweep: PowerShell script for identifying if MFA is enabled in Microsoft services

• Microsoft: Microsoft Digital Defense Report 2025

• Multiple Password Managers Vulnerable to Clickjacking Attacks

• Abusing PIM-related application permissions in Microsoft Graph - Part 1

• YAMS: A simulation tool for AWS IAM written in Go

---

Up Coming Event Attendance:

• Future Identity Festival - London - Nov 10/11 (hosting panels NHI/cloud)

• Blackhat EMEA - London - Dec 10/11 (attendee)

---

Free Identity Security Cheat Sheets

• Cheat Sheet: Top 30 IAM Metrics for B2C

• Cheat Sheet: Top Metrics for B2E IAM

• Cheat Sheet: MCP Security

• Cheat Sheet: Agentic-AI Identity Security

---

From The Archives

Last Months Industry Webinar:

• 17 September - Detect, Protect and Defend: A Holistic Approach to Human and Non-Human Identity Security with Permiso

---

Recent Podcasts

• E63 The Analyst Brief: Are Identity Platforms Legacy? The Rise of Identity Information Flows

---

Recent Research Reports:

• The Cyber Hut: A Market Guide to Identity Security Posture Management (ISPM): The Role of Data-Centric Identity Observability

---

Recent Insight and Comment:

• Why PAM Needs to Evolve

• Shifting Left of Boom in Identity

• Stale access, stale risk: is Continuous Identity the answer?

• Comment on the role of IAM in Operational Technology for Industrial Cyber magazine

• Migrating to Data-Centric ISPM

• Siloes of Failure: Identity as the Unifying Control

---

Recent Industry Webinars

• Identity-First Security for AI Agents with Token Security

• Addressing the IAM Data Problem: A fireside chat with Radiant Logic

• An Identity Security Playbook: The What and The Why with Silverfort

• Putting the AI in IAM a fireside chat with Apono

• Too Many IDPs: Why Now, How to Rationalize?

• The First Step to Tackling the NHI Security Challenge

• Addressing Blind Spots in Identity Security for 2025

---

Recent Academy Episodes:

• 37: What is Identity Risk Management?

• 36: What is Identity Data Management?

• 35: What are Initial Access Brokers?

• 34: What is SPIFFE?

• 33: What Role does AI play in IAM?

---

Recent Vendor Assessment Reports:

---

Recent Vendor Introduction Interviews:

---

Recent Video Shorts:

---

Order IAM and Identity Security Books on Amazon:

• IAM at 2035: A Future Guide to Identity Security - Paperback, Audio, Kindle and Hardback

• CIAM Design Fundamentals - Paperback, Audio and Kindle

---