Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

eMudhra CA Key Exposure: How miniOrange PAM Enables Control

The eMudhra CA key exposure involved eight intermediate certificates generated with weak private keys. Although the affected intermediates had not issued publicly trusted end-entity certificates, changes to certificate trust stores created a need to identify dependencies and plan certificate replacement across affected environments.

What is Identity Manager? | One Identity | IGA

What is One Identity Manager? It’s an identity governance and administration (IGA) solution that automates user provisioning, access requests, access certification, and role management across on-premises, hybrid, and cloud environments. Watch this overview to see how Identity Manager helps you enforce least privilege, close compliance gaps, and manage the full identity lifecycle from joiner to mover to leaver. Learn more about identity governance and administration at oneidentity.com.#IGA.

How IAM Supports GDPR's Right to Be Forgotten

Deleting a user account takes seconds. Deleting everything your organization knows about that user is a much bigger job. When a customer invokes their right to be forgotten, their profile in your identity provider is only the starting point, because their details also live in your CRM, support desk, billing tool, analytics platform, and a few SaaS apps your marketing team connected last year. Every one of those copies has to be found and dealt with before the legal deadline.
Featured Post

AI Agents Are Rewriting the Rules of Identity Security

For years, identity security has been based on a fairly straightforward premise: organisations need to know who, or what, is accessing their systems, what they are authorised to do, and whether that access remains appropriate. However, the rise of autonomous AI agents has changed the game, and tore-up the traditional model of role-based access controls and privileged access management.

6 Best Model Context Protocol (MCP) Server Plugins for WordPress (2026)

Managing a WordPress site no longer means logging in to the dashboard for every update or routine task. With the Model Context Protocol (MCP), AI assistants such as ChatGPT, Claude, and Cursor can securely interact with your WordPress site through natural language. They can retrieve content, update posts, manage WooCommerce stores, and perform other actions without custom integrations. To enable these AI interactions, you need an MCP server plugin for WordPress.

Introducing Persona AI: AI for identity operations

Persona AI brings AI directly into the Persona identity platform. It helps teams verify identities, review cases, investigate fraud signals, and apply their own policies to make faster, more consistent decisions. Many identity decisions still need people to do the work by hand: collecting evidence, screening, flagging risk, interpreting policy and routing cases. Persona AI is built into the platform, so it works directly with your identity data, risk signals, policies and workflows.

How CIAM Can Prevent Abandoned Carts for Ecommerce Businesses

A customer finds the perfect product, adds it to their cart, and heads to checkout. But instead of completing the purchase, they're asked to create an account, remember another password, or go through a lengthy registration process. A few unnecessary steps can turn a potential sale into an abandoned cart. According to the Baymard Institute, the average online shopping cart abandonment rate is 70.22%.

Stopping candidate fraud with Persona's head of talent

Recruiters everywhere are seeing hundreds, if not thousands, of fake candidates, and it goes well beyond AI-polished resumes. Natalie, Persona's head of talent, talks with Michael, an account executive on Persona's Workforce Identity team, about what candidate fraud looks like from the recruiter's chair, why Zoom interviews and flying people on site aren't enough, and what changed after Persona added automated identity verification to its own hiring process.

Endpoint Visibility: How to Find and Secure the Devices Your IT Team Can't See

Endpoint visibility is the ability to identify connected devices, understand their activity and health, and assess their security posture. Without it, IT teams struggle to determine which endpoints access business resources, identify security weaknesses, and investigate operational problems. Remote employees, personal phones, contractors, cloud-connected systems, and specialized equipment expand the endpoint landscape.