Authentication is basically solved. Authorization is another thing entirely… CrowdStrike has signed a $740 million deal to buy identity security startup SGNL. The move underscores the growing threat of identity-based attacks as companies struggle to secure skyrocketing numbers of non-human identities, including AI agents.… READ MORE HERE…

Company says it dropped the ball, apologizes for wasting people’s time Logitech says an expired developer certificate is to blame after swaths of customers were left infuriated when their mice malfunctioned.… READ MORE HERE…

Prompt injection lets risky commands slip past guardrails IBM describes its coding agent thus: “Bob is your AI software development partner that understands your intent, repo, and security standards.” Unfortunately, Bob doesn’t always follow those security standards.… READ MORE HERE…

Customers report being locked out after grabbing the password manager via F-Droid Some HSBC mobile banking customers in the UK report being locked out of the bank’s app after installing the Bitwarden password manager via an open source app catalog.… READ MORE HERE…