Vendor demos show you an identity platform working under ideal conditions. Retailers need to know where it breaks — at peak traffic, at scale, and against legacy systems.

A Lenovo ID email verification flaw let attackers access about 5,000 Dropbox accounts without using the victims’ Dropbox passwords.

Choosing customer identity? Our CIAM guide maps 8 picks — Auth0 for developers, Ping for scale, Stytch for fraud-aware flows — to your product and industry.

Add extra security to your SPA with DPoP and FusionAuth - https://fusionauth.io/blog/sender-constrain-access-tokens-react-app-dpop

Alation disclosed a breach; catalog metadata can map sensitive fields, data flows and service accounts, guiding attacks for years to come.

5 Warning Signs Your Company Has Outgrown Its Current Authentication Solution - https://fusionauth.io/blog/5-warning-signs-outgrown-auth

AI Is Exposing the Limits of Your Identity Infrastructure - https://fusionauth.io/blog/ai-exposing-limits-identity-infrastructure

As anybody who follows cybersecurity knows, when a new technology emerges, it’s usually followed by a threat actor trying to -jack it up. There’s clickjacking (tricking someone into hitting a disguised URL), sessionjacking (stealing a token to impersonate a user and gain their web access), and DNSjacking (redirecting someone to an attacker-controlled destination). And now, with attackers trying to take over large language models, we have…LLMjacking.

The Convenience Trap in SaaS-Only Identity - https://fusionauth.io/blog/convenience-trap-saas-only-identity

Between July 15 and August 6, 2026, AWS Strands Agents Tools — the first-party tool package for the Strands Agents SDK — received four distinct security advisories. The vulnerabilities range from credential disclosure to arbitrary command execution, but they share a singular root cause: security-sensitive parameters were exposed as LLM-controllable inputs in the tool schema. […]

You Don't Own the Customer Experience If You Don't Control Identity - https://fusionauth.io/blog/customer-experience-control-identity

Homegrown Auth Is a Business Continuity Risk, Not Just a Security Risk - https://fusionauth.io/blog/homegrown-auth-business-continuity-risk

Who Actually Owns Customer Identity in Your Organization? - https://fusionauth.io/blog/who-owns-customer-identity

MCP Client Registration: Dinner Party Or Nightclub? - https://fusionauth.io/blog/cimd-vs-dcr

In the weeks after nine states were hit, lawmakers at the federal and state levels have proposed new funding to harden infrastructure, but experts warned they remain vulnerable.

Researchers have uncovered a critical vulnerability with a CVSS score of 9.8 in the TranslatePress WordPress plugin, with 400,000 active installations, that could allow unauthenticated attackers to…

David Hayes believes maintainable software starts with a simple idea: fitness for purpose.

Lurking in many business environments are AI agents that pose serious security risks but, for the most part, remain out of sight of security teams, according

Release 1.69.0 - https://fusionauth.io/docs/release-notes#version-1-69-0

AI didn't create the identity problem. It removed the speed limit - https://fusionauth.io/blog/announcing-fusionauth-1-69

Attackers turned the trusted AsyncAPI CI/CD publishing pipeline against its users, and the provenance checks all came back clean.

Researchers have found online service Poison Claude reselling access to Anthropic’s premium AI models at a significant discount with suspicions that these discounts are coming from fraudulently reg…

Meet the FusionAuth Crew at Booth #5642

Researchers have uncovered more than 24,000 servers leaking authentication password hashes from a 20-year-old vulnerability in their Baseboard Management Controller (BMC) interface.  Lava HQ has a …

FusionAuth Appoints Jamey Miller as SVP of Engineering and Technology - https://fusionauth.io/blog/jamey-miller-svp-engineering

FusionAuth Launches Intelligent MFA in Latest Release as Demand Surges for Identity Infrastructure Customers Can Control - https://fusionauth.io/blog/fusionauth-intelligent-mfa-pr

AI agents expose identity gaps as machine accounts outpace governance.

Announcing FusionAuth 1.68 - Intelligent Kamfa - https://fusionauth.io/blog/announcing-fusionauth-1-68

Intelligent MFA Should Challenge Risk, Not Loyal Customers - https://fusionauth.io/blog/intelligent-mfa

Jim McDonald sits down with Dan Moore, Senior Director of CIAM Strategy and Identity Standards at FusionAuth, for an in-depth conversation on customer identity and access management. Dan explains how FusionAuth views authentication as the front door to any application and why control, deployment flexibility, and developer ownership are central to their approach. The discussion covers progressive registration, friction vs. usability, customization options, identity standards, the build vs. buy debate, risk-based MFA, and how AI agents will shape the future of customer identity. This episode and others is made possible with support from FusionAuth. Learn more at fusionauth.io/idac. Connect with Dan: https://www.linkedin.com/in/mooreds/ Learn more about FusionAuth: https://fusionauth.io/idac Blog article mentioned: https://bobdahacker.com/blog/fifa-hack Connect with us on LinkedIn: Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/ Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/ Visit the show on the web at http://idacpodcast.com 00:00:00 Introduction 00:01:18 What is FusionAuth? 00:03:15 Dan's identity origin story 00:04:19 Developer focus and ethos 00:06:54 Authentication as the front door 00:10:00 Balancing friction and usability 00:15:24 Customization in CIAM 00:18:10 What sets FusionAuth apart 00:20:33 FusionAuth's customer sweet spot 00:25:48 Deployment flexibility and the control spectrum 00:30:19 Common challenges in CIAM 00:33:06 Build vs. buy for authentication 00:36:00 Omni-channel authentication 00:40:27 Why identity standards matter 00:42:07 Risk-based MFA and intelligent challenges 00:45:00 AI agents and the future of CIAM 00:49:23 Closing thoughts 00:51:35 Vacation roundup Keywords: IDAC, Identity at the Center, Jeff Steadman, Jim McDonald, Dan Moore, FusionAuth, CIAM, customer identity, authentication, access management, IAM, identity standards, MFA, risk-based authentication, progressive registration, OAuth, OIDC, SAML, AI agents, deployment flexibility, build vs buy, Sponsor Spotlight

Instagram has resolved a security issue that allowed several users’ accounts to get hacked. The attack appeared to rely on tricking Meta’s own AI-powered support chatbot into granting access to a v…