Identity & Access Management
-
Welcome to TechTarget Cybersecurity
Our expanded reporting, deeper analysis and sharper enterprise security coverage will help CISOs cut through the noise, assess emerging risks and make informed decisions that strengthen their security posture and business resilience.
By Sharon Shea , James Walker • Oct. 27, 2026 -
CrowdSec breach exposes security blind spots in developer access
Disabling corporate logins isn't enough. The CrowdSec breach demonstrates how offboarding oversights create quiet, long-term backdoors.
By Craig Galbraith • Oct. 6, 2026 -
Opinion // Omdia Analysts' Perspectives
Oktane ‘26 brings clarity to AI agent identity security
Many organizations are prioritizing agentic AI initiatives, but identity security remains a challenge. Okta's recent announcements aim to address the risks posed by AI agents.
By Todd Thiemann • Sept. 29, 2026 -
Expert Advice
CISO’s guide to privileged access management
PAM helps organizations govern privileged accounts, but deployment can bring cost, complexity, workflow friction and new risks that require careful planning and ongoing oversight.
By Amy DeCarlo • Sept. 29, 2026 -
Hardcoded credentials in public MCP files open door to cyberattacks
New research reveals thousands of public Model Context Protocol files leak non-expiring credentials on GitHub -- leaving corporate data, private networks and costly AI token pools open to exploitation.
By Alissa Irei • Sept. 23, 2026 -
Expert Advice
CISO’s guide to decentralized identity: What works and what doesn’t
Decentralized identity isn't for every organization, but where it's deployed correctly, the methodology yields improved trust, privacy and agility.
By Damon Garn • Aug. 18, 2026 -
Expert Advice
CISO’s guide to data obfuscation
With so many services requiring access to sensitive data, encryption alone is not enough. Data obfuscation has evolved into a core element of modern cybersecurity architecture.
By Dave Shackleford • July 28, 2026 -
Expert Advice
CISO’s guide to privileged identity management
IAM is more crucial than ever in the AI era. To better control who -- and what -- is accessing systems and data, security teams need to move beyond standing access privileges.
By Amy DeCarlo • July 24, 2026 -
Expert Advice
Common MFA mistakes -- and how to fix them
Attackers have adapted their techniques to circumvent an organization's MFA controls. When they succeed, it's usually because MFA wasn't properly set up or managed.
By Dave Shackleford • July 9, 2026 -
Expert Advice
Top identity and access management risks
Identity is long past the days of logging into systems. Security teams must now manage SaaS apps, AI agents and machine-to-machine interactions across distributed environments.
By Dave Shackleford • June 9, 2026 -
Opinion // Omdia Analysts' Perspectives
Identity security for AI agents: The proliferation challenge
Identity teams can accelerate AI adoption with strong security foundations. But managing nondeterministic AI agents is different from securing human identities and traditional NHIs.
By Todd Thiemann • May 22, 2026 -
Expert Advice // Enterprise password managers: Safety, benefits and tools
5 leading enterprise password managers to consider
Admins need their password managers to provide a wide range of features and capabilities. Learn what every password manager must have, along with available options.
By Karen Kent • May 7, 2026 -
Top zero-trust use cases in the enterprise
When applied correctly, zero trust can minimize an organization's attack surface. Experts weigh in on the best use cases where zero trust can deliver results.
By Mary Pratt • May 1, 2026 -
Expert Advice
What are the most common authentication methods?
To authenticate users, security teams have a range of options available. Note, however, that a combination of methods is the best and safest approach.
By Karen Kent • April 29, 2026 -
Expert Advice
How to roll out an enterprise passkey deployment
Passkey security sidesteps many of the end-user and cybersecurity issues that plague traditional passwords. Learn how to successfully deploy passkeys in your organization.
By Amy DeCarlo • April 15, 2026 -
Expert Advice
8 best practices for a bulletproof IAM strategy
IAM systems enable secure access to applications and resources. But to benefit from IAM -- and avoid a security failure -- teams must know which best practices to follow.
By Sean Kerner • April 9, 2026 -
Opinion // Omdia Analysts' Perspectives
Identity security at RSAC 2026: The new enterprise dynamics
Omdia analyst Todd Thiemann made the rounds at RSAC 2026 Conference, speaking with CISOs, practitioners and vendors to identify the latest shifts in identity and data security.
By Todd Thiemann • April 7, 2026 -
Expert Advice
Top UEBA use cases in enterprise cybersecurity
User and entity behavior analytics tools find patterns hidden in an ocean of data, making them critically important in cybersecurity. Explore key UEBA use cases in the enterprise.
By John Burke • March 18, 2026 -
What is identity and access management? Guide to IAM
No longer just a good idea, IAM is a crucial piece of the cybersecurity puzzle. It's how an organization regulates access to information and meets its compliance obligations.
By Sandra Gittlen, Phil Sweeney • Nov. 21, 2025 -
Opinion
How to plan an IAM program strategy
More than half of organizations lack an IAM strategy. Discover how security leaders can build stakeholder-driven identity management programs that deliver results.
By Nathan Harris, Gartner • Nov. 19, 2025 -
Expert Advice // Introduction to open source password crackers
How to use Hashcat to recover passwords
This tutorial and accompanying video on using Hashcat for ethical password recovery covers installation, hash types, dictionary attacks and rule variations for security testing.
By Rob Shapland • Nov. 18, 2025 -
Expert Advice
Top 7 password hygiene tips and best practices
Passwords enable users to access important accounts and data, making them attractive targets to attackers, too. Follow these password hygiene tips to keep your organization safe.
By Sharon Shea , Diana Kelley • Oct. 22, 2025 -
Opinion
Identity security tool sprawl: Origins and the way forward
From IGA to ITDR, identity teams juggle diverse security functions. Explore how tool proliferation affects operations and consolidation strategies.
By Todd Thiemann • Oct. 7, 2025 -
Opinion // Omdia Analysts' Perspectives
Identity and data security themes at Black Hat 2025
Read about the identity and data security happenings at Black Hat 2025, including advancements that enable AI adoption and products that help prepare for a post-quantum world.
By Todd Thiemann • Aug. 20, 2025 -
What is biometric authentication?
Biometric authentication is a security process that relies on the unique biological characteristics of individuals to verify their identity.
By Kinza Yasar, Cameron Hashemi-Pour • July 18, 2025