Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

The CA/Browser Forum’s recent unanimous vote to reduce maximum public TLS certificate validity to just 47 days by March 2029 marks a seismic shift in the digital security landscape. This new standard isn’t a proposal—it’s an approved policy. And every organization that issues or relies on public TLS certificates must begin preparations today. Because it’s no longer about watching Apple’s early lead in reducing lifespans but following an industry-wide mandate.

Welcome to the 2025 Identity Security Landscape rollout—and to the “it’s complicated” phase of our relationship with AI. Each year, CyberArk surveys security leaders across the globe to understand their top identity security concerns. This year, AI delivered the trifecta: attack weapon, defense tool and risk multiplier.

The standout themes at KubeCon + CloudNativeCon Europe 2025 in London strongly centered on how identity is rapidly becoming the linchpin for securing cloud-native infrastructure. The recurring theme I saw wasn’t just Kubernetes innovation—it was the rising urgency of securing the who behind every action across platforms, clusters, services, and tools.

In this blog, we’ll show you how to simplify Azure AD Multi-Tenant authentication using the miniOrange OAuth SSO plugin. You’ll learn how to get secure, seamless Azure AD SSO working for multiple organizations—fast and hassle-free.

Managing iPhones and iPads across your organization can feel like a never-ending challenge. From misuse of apps to potential data leaks—businesses need a better way to stay in control. In this blog, you’ll learn how iOS MDM restrictions can help you apply smart policies, secure devices, and streamline mobile operations.