#iam

Unpopular Opinion(?): I want AWS to start charging money for using and simply having IAM users (currently all IAM features are forever free). Having FinOps join my side in the quest for getting rid of legacy IAM users in the organization is power unmatched to what I can do by myself. Once CFO and CISO combine power, realizing that these security gaps costs them money RIGHT NOW (and not in a future potential of cyber incident) will get things moving much quicker. I started working in a big corporate and that's one of the issues they have. too many IAM users. It's disgusting. #aws #security #cloudsec #cloudsecurity #iam #KillYourIAMUsers

Pega patched a SAML authentication bypass in Pega Platform, rated Critical 9.5 and High 7.0. No CVE, no known compromise. See affected versions and fixes. #Pega #SAML #AuthenticationBypass #SSO #PegaPlatform #IAM #Vulnerability #PatchNow https://securityonline.info/pega-saml-authentication-bypass/?utm_source=mastodon&utm_medium=jetpack_social

Industry analysts say machine identities now outnumber humans in the enterprise by as much as 80 to 1. So when people ask if I'm worried AI will take my job, the answer is no. Somebody has to onboard 80 service accounts per employee, rotate their credentials, and explain to an AI agent why its access request still needs a data steward's approval. Job security in IAM has never looked better. #IAM #IdentitySecurity

Four OpenAM vulnerabilities are fixed in 16.1.2. CVE-2026-62379 (CVSS 9.8) allows unauthenticated remote code execution; CVE-2026-62261 scores 9.9. #OpenAM #RCE #IAM #CVE202662379 https://securityonline.info/openam-cve-2026-62379/?utm_source=mastodon&utm_medium=jetpack_social

Got an email today from a customer who can't log in with their TOTP code. Turns out they scanned the example QR code on the help page instead of following the instructions to get their own QR code. Learn a new way customers act every day. #IAM #CIAM #TOTP #MFA

#keycloak : Wie aus Projekten ein Competence Center und ein Produkt entstand https://blog.inventage.com/blogs/keycloak-competence-center/ #inventage #iam

👋 New here. AWS security engineer in Paris, AWS Community Builder. I write open-source AWS security tooling: IAM privilege-escalation path detection, S3 / EC2 / Lambda misconfiguration scanners, and a tracker that records every change to AWS managed IAM policies over time. Also maintain LocalEmu, a free local AWS emulator for testing without touching real accounts or credentials. Here to learn from this community and share what I find. 🔒 #InfoSec #CloudSecurity #AWS #IAM #opensource #devsecops

🚨 The BSides Luxembourg 2026 keynote just dropped! 𝗞𝗘𝗬𝗡𝗢𝗧𝗘: 𝗜𝗗𝗘𝗡𝗧𝗜𝗧𝗬 𝗦𝗘𝗖𝗨𝗥𝗜𝗧𝗬 𝗝𝗨𝗦𝗧 𝗘𝗫𝗣𝗟𝗢𝗗𝗘𝗗 Watch @wendynather@infosec.exchange's keynote, recorded live at the Digital Learning Hub Luxembourg Hub during 𝗕𝗦𝗜𝗗𝗘𝗦 𝗟𝗨𝗫𝗘𝗠𝗕𝗢𝗨𝗥𝗚 𝟮𝟬𝟮𝟲. 👤 Wendy Nather https://www.linkedin.com/in/wendynather/ 🎥 Watch the full keynote: https://archive.org/details/BSidesLuxembourg2026/d1+t1+02+Identity+Security+Just+Exploded+-+Wendy+Nather.mkv #BSidesLuxembourg #IdentityManagement #CyberSecurity #IAM #DigitalIdentity #SecurityLeadership #DigitalLearningHub

Depol makes sense in theory, but rolling it out without fully mapping existing IAM entitlements risks creating enforcement gaps that are worse than centralized control. Pragmatic adoption means layering, not replacing. #depol #IAM #decentralization