When a rewards balance disappears, the loss becomes visible at redemption. Miles may be transferred to a partner program, points converted into gift cards, or award travel booked without the account owner’s knowledge. By the time that happens, however, the loyalty program fraud has already succeeded. The real questions arise…
Most vishing defenses assume the attacker is after a password. The campaigns causing the most damage in 2026 rarely ask for one. Instead, they persuade a help desk representative to enroll a new phone number or convince a user to approve a connected application. The login that follows appears legitimate…
When an agentic AI agent acts on a user’s behalf, most current deployments run it with that user’s privileges and record its activity under the user’s identity. The agentic AI agent itself disappears into the session. That design choice creates the core challenge of governing agentic AI. Two distinct principals,…
The Federal Bureau’s (FBI’s) 2025 Internet Crime Complaint Center (IC3) Report logged $20.9 billion in cybercrime losses across more than one million complaints. For the first time in the report’s 25-year history, the FBI identified AI as a distinct crime category: 22,364 complaints and $893 million…
The Office of the National Coordinator for Health Information Technology (ONC) reports that in 2025, 65% of individuals accessed their health records online, 57% used app-based access, and 51% used proxy or caregiver access. Those numbers mean patient identity infrastructure now serves a population that varies…
Identity weaknesses played a material role in almost 90% of the 750-plus incidents Palo Alto Networks’ Unit 42 investigated in 2025, with 65% of initial access driven by identity-based attacks. This was not solely because those organizations lacked multi-factor authentication (MFA) or security training. Rather, attackers…
Over the past year, we realized that the ID Dataweb admin console had outgrown its original design. Configuring workflows required too many clicks across disconnected screens, policy logic was difficult to read and troubleshoot without support, and investigating the ‘what happened and why’ behind a denied transaction often…
Every enterprise call center fraud prevention program faces the same design tradeoff: how much of the identity verification burden should rest on agents, and how much should shift to automated controls? Most organizations still lean heavily toward the agent side. They invest in training, create verification scripts, and assume that…
Large enterprises and government agencies now manage workforce identities across dozens of cloud services and for thousands of employees and third-party contractors who may never set foot in a physical office. This level of sprawl makes identity a critical factor in determining whether an organization’s broader security architecture is resilient…
In July 2025, the National Institute of Standards and Technology (NIST) released the final version of Special Publication (SP) 800-63, Revision 4. This update reflects nearly four years of research, two public draft cycles, and close to 6,000 public comments. The revision defines updated Digital Identity Guidelines designed to…