IT Brief Canada - Technology news for CIOs & IT decision-makers
Canada

Identity Security Stories

Global Stories

Identity Security stories

OpenAI model breaches Hugging Face in unprecedented incident
Cloud Security

OpenAI model breaches Hugging Face in unprecedented incident

Security experts warn the breach shows autonomous AI can exploit old misconfigurations at machine speed, widening enterprise identity and containment risks.

By Sofiah Nichole Salivio • 4 min read • Last week
ThreatDown adds shadow AI & identity tracking tools
Digital Transformation

ThreatDown adds shadow AI & identity tracking tools

Security teams face higher breach costs as ThreatDown expands visibility over unsanctioned AI tools and machine accounts in one console.

By Mark Tarre • 4 min read • Last week
Okta data shows enterprises using multiple AI platforms
Hybrid Cloud

Okta data shows enterprises using multiple AI platforms

Enterprises are spreading AI use across several platforms, heightening identity and access risks as agents gain broader system access.

By Mark Tarre • 4 min read • Last week
Portnox tops one million devices as bookings jump 52%
Network Security

Portnox tops one million devices as bookings jump 52%

Rising demand for access-security tools lifted bookings 52% in the second quarter as the company crossed one million managed devices.

By Sofiah Nichole Salivio • 4 min read • Last week
Tenable adds code security to its exposure platform
Endpoint Protection

Tenable adds code security to its exposure platform

Security teams can now rank code flaws against wider business risk as Tenable One links static vulnerability data with cloud, identity and attack-path exposure.

By Sean Mitchell • 3 min read • Last week
Entrovy launches kinetic8 for enterprise cyber visibility
Software-as-a-Service

Entrovy launches kinetic8 for enterprise cyber visibility

Enterprise security teams can now move from fragmented asset views to explainable risk scoring, as the platform reaches general availability.

By Sean Mitchell • 4 min read • This month
Resilience over prevention as AI reshapes security landscape
Data Protection

Resilience over prevention as AI reshapes security landscape

Rising ransomware speed is pushing ANZ firms to increase spending on recovery strategies as AI gives attackers new ways in.

By David Shilovsky • 4 min read • This month
Keeper launches Privileged Cloud for zero standing access
Privileged Access Management

Keeper launches Privileged Cloud for zero standing access

The move could help organisations curb cloud admin account abuse by revoking elevated access automatically after approved sessions end.

By Joseph Gabriel Lagonsin • 4 min read • This month
Delinea launches partner scheme to lift channel profits
Software-as-a-Service

Delinea launches partner scheme to lift channel profits

Partners get tighter deal protections and AI training as Delinea seeks to ease margin pressure and disputes over renewals.

By Mark Tarre • 3 min read • This month
CrowdStrike names AJ Shipley as Chief Product Officer
Endpoint Protection

CrowdStrike names AJ Shipley as Chief Product Officer

The hire bolsters CrowdStrike's push into AI security as rivals race to simplify sprawling cyber defence stacks for enterprise customers.

By Mark Tarre • 4 min read • This month
Asia-Pacific firms urged to govern AI agents better
Data Protection

Asia-Pacific firms urged to govern AI agents better

Governance gaps are exposing firms to higher AI agent risks, as most now use them daily and many lack policies to control access.

By Sean Mitchell • 5 min read • This month
Tenable adds app security data to exposure platform
Hybrid Cloud

Tenable adds app security data to exposure platform

Security teams can now rank code flaws against cloud and identity risks after Tenable folded application security data into its exposure platform.

By Mark Tarre • 4 min read • This month
Phishing toolkits target Microsoft 365 MFA in surge
Multi-factor authentication

Phishing toolkits target Microsoft 365 MFA in surge

Account takeovers are becoming harder to stop as attackers use real-time code theft and fake login pages to bypass Microsoft 365 MFA.

By Mark Tarre • 5 min read • This month
Proofpoint spots Entra ID spoofing attack technique
Network Security

Proofpoint spots Entra ID spoofing attack technique

Attackers can now probe Entra ID accounts and passwords at scale without a real app, leaving defenders with little sign-in telemetry.

By Sean Mitchell • 4 min read • This month
Microsoft makes passkeys default for Entra ID logins
Public Cloud

Microsoft makes passkeys default for Entra ID logins

Users relying on SMS or voice for sign-ins will be nudged to passkeys as Microsoft phases out weaker multifactor methods in Entra ID.

By Sean Mitchell • 4 min read • This month
Agentic rollout creates new identity security challenge
Data Protection

Agentic rollout creates new identity security challenge

Poor governance is leaving many AI agents stuck out of production, while those that run can expose firms to legal and security risks.

By David Shilovsky • 5 min read • This month

Stories from Other Regions

Identity Security stories

Autonomous OpenAI agents breach Hugging Face in test
Robotics

Autonomous OpenAI agents breach Hugging Face in test

Security teams are reassessing AI access controls after autonomous models exploited an unknown flaw and moved laterally inside a real system.

By Sofiah Nichole Salivio • 6 min read • Last week
Corsha appoints new chief operating & product officers
Manufacturing

Corsha appoints new chief operating & product officers

Demand for secure industrial connectivity is rising as Corsha expands its leadership team to target manufacturers, defence and critical infrastructure.

By Mark Tarre • 4 min read • This month