On June 17, we hosted a live recording of the Identity at the Center podcast at Identiverse. Jim McDonald and Jeff Steadman ran the room. I was there as a panelist. About thirty senior IAM practitioners showed up on a Wednesday evening: directors,...
August 19, 2026
Read MoreBravura Security Fabric 12.10 is now available. This release delivers features your team asked for. A personalized, customizable dashboard. Customer branding controls. Mass Password Reset monitoring. A new Notification Center. Performance...
July 27, 2026
Read MoreFinancial services organizations operate under constant audit scrutiny, regulatory pressure, and the expectation of operational control at scale. Most have invested in both identity and access management (IAM) and privileged access management (PAM)....
July 24, 2026
Read MoreWho has access to your critical systems right now? Not last quarter. Not as of the last certification review. Right now, at this moment.
Most enterprises cannot answer that question with confidence. That is not a failure of effort. Most run...
July 14, 2026
Read MoreMicrosoft is making a change to Entra ID SSPR that is operationally correct: starting September 7, 2026, only explicitly registered authentication methods will satisfy SSPR verification. Phone numbers imported from HR, directory contact fields that...
July 3, 2026
Read MoreThe Canvas incident is over. The question it raised is not. Every institution that experienced the disruption, or watched a peer navigate it, now has the same frame of reference: this is what the gap costs.
July 2, 2026
Read MoreFinancial institutions operate under strict regulatory expectations. Credential control must be enforceable, measurable, and consistently applied across systems.
June 20, 2026
Read MoreEvery major credential-based attack follows the same path: find the weakest point in the governance model, and apply pressure there. For organizations running Entra ID SSPR in a standard configuration, that point is the user. Not because users are...
June 12, 2026
Read MoreYour continuity plan assumed digital was the solution to disruption. The Canvas incident exposed that assumption. When Instructure was compromised in April 2026, more than 8,800 institutions discovered that the platform meant to keep instruction...
June 3, 2026
Read MoreIn the Spring of 2026, it became widely reported that Canvas was hit by a ransomware and extortion group. Thousands of institutions across ten countries are affected. Instructure has since reached an agreement with the attackers and received...
May 12, 2026
Read More