September 2026
4artifacts
IAM & Security Weekly Briefing
Microsoft disrupted the EvilTokens device-code phishing service, a phishing-as-a-service operation tied to 12,000 inbox compromises that Microsoft says used AI at every step of the attack chain.
IAM & Security Weekly Briefing
Cisco's Identity Services Engine suffered an actively exploited, pre-auth authentication bypass (CVE-2026-76460, CVSS 10.0) — a maximum-severity hit on identity infrastructure itself.
IAM & Security Weekly Briefing
Microsoft shipped a record 974 patches, including two Windows flaws exploited in the wild, pushing monthly patch volume beyond what most teams can test and deploy.
IAM & Security Weekly Briefing
A dark-web service is selling scans of 153M+ U.S./Canadian driver's licenses, allegedly sourced from an identity-verification vendor; the FBI is now investigating — a direct hit on the identity trust…