Descope CIAM 2025 Report, Curity IAM for Agents, Oasis Agentic Access Mgmt, ServiceNow + Veza

This Weeks Mystical Quartet

Curated Industry Headlines

• Auth0: Next.js 16: What’s New for Authentication and Authorization

• AWS: Introducing attribute-based access control for Amazon S3 general purpose buckets

• AWS: Simplify access to external services using AWS IAM Outbound Identity Federation

• Curity: Identity and Access Management for AI Agents

• Delinea: Cyber resilience: The name of the game for 2026

• Descope: 2025 State of Customer Identity Report

• FIDO: FIDO Alliance Announces First Authenticate Conference for the Asia-Pacific Region

• Gathid: Light IGA Vs. Full IGA: Rethinking Identity Governance For The Real World

• Oasis: Launch Agentic Access Management

• Omada Advances AI-Ready Governance with the Model Context Protocol Initiative

• Okta: Otkane on Demand

• Radiant Logic: Launches AI-Driven Remediation to Reduce the Attack Surface

• ServiceNow to Expand Security Portfolio With Acquisition of Veza’s Leading AI-native Identity Security Platform

• SGNL: CAEP Best Practices

---

---

Identity Threat Intelligence Updates

• Phishing for AWS Credentials via the New ‘aws login’ Flow

• Stop Putting Your Passwords Into Random Websites (Yes, Seriously, You Are The Problem)

• Azure Silhouette, a SPN sorter and roles minimizer

• Managing Privileged Roles in Microsoft Entra ID: A Pragmatic Approach

• The Identity Crisis - Report by Rubrik Zero Labs

• Not Location, Not Tunnel, but a Secret Third Thing: Datacenter Infrastructure & Identity Attacks

• Salty2FA & Tycoon2FA Hybrid: A New Phishing Threat to Enterprises

• Microsoft Actor Token Forgery

---

Up Coming Event Attendance:

• Blackhat EMEA - London - Dec 10/11

---

Free Identity Security Cheat Sheets

• Cheat Sheet: Top 30 IAM Metrics for B2C

• Cheat Sheet: Top Metrics for B2E IAM

• Cheat Sheet: MCP Security

• Cheat Sheet: Agentic-AI Identity Security

---

Identity Security Vendor Summary Reports

Recently Added:

• Axiad

• Apono

• WSO2

• AuthSignal

• Entro Security

---

Recent Content Updates

Improving the MTTA

• A deep dive into the concept of improving the mean time to access for a range of different stakeholders to a broad array of high risk systems

---

Upcoming Webinar:

• 3 December - Modernizing AD Protection Against Lateral Movement and Privileged Access Abuse with Silverfort

---

Recent Podcasts

• E65 The Analyst Brief: Autumnal funding and acquisitions news

---

Recent Research Reports:

• The Cyber Hut: A Market Guide to Identity Security Posture Management (ISPM): The Role of Data-Centric Identity Observability

---

Recent Insight

• Defining and Securing The Enterprise Production Stack

• Analysing Application Activity

• Building App Policies with Continuous Identity

• Why PAM Needs to Evolve

• Shifting Left of Boom in Identity

• Stale access, stale risk: is Continuous Identity the answer?

---

Recent Industry Webinars

• Always On, Always Aware: Building a Continuous Identity Strategy

• Identity-First Security for AI Agents with Token Security

• Addressing the IAM Data Problem: A fireside chat with Radiant Logic

• An Identity Security Playbook: The What and The Why with Silverfort

• Putting the AI in IAM a fireside chat with Apono

• Too Many IDPs: Why Now, How to Rationalize?

---

Recent Academy Episodes:

• 38: How does Identity and Access Management relate to Zero Trust?

• 37: What is Identity Risk Management?

• 36: What is Identity Data Management?

• 35: What are Initial Access Brokers?

• 34: What is SPIFFE?

---

Recent Vendor Assessment Reports:

---

Recent Vendor Introduction Interviews:

---

Recent Video Shorts:

---

Order IAM and Identity Security Books on Amazon:

• IAM at 2035: A Future Guide to Identity Security - Paperback, Audio, Kindle and Hardback

• CIAM Design Fundamentals - Paperback, Audio and Kindle

---

---