#IAM
All CosmicBytez Labs articles tagged #IAM, across news, security advisories, how-to guides, and projects.
- News
Identity Visibility in 2026: The Foundation of Identity Security
Why identity visibility — seeing every identity and how its access is actually used — is now foundational to identity security.
- Security
CVE-2026-82856: @hulumi/policies GitHub OIDC Trust Policy Bypass
hulumi/policies before 1.3.2 missed set-qualified IAM operators, letting wildcard GitHub Actions OIDC conditions slip past guardrails.
- Security
CVE-2026-82857: hulumi Privilege Escalation via Weekly Integration IAM Policy
hulumi before 1.3.2 let attackers create persistent higher-privilege af-e2e-* roles in the sandbox account via a flawed IAM boundary.
- News
The Hidden Cost of Recurring Credential Incidents
IBM's 2025 Cost of a Data Breach Report puts the average breach at $4.4 million — but that headline figure understates the true damage when credential...
- HOWTO
Microsoft Entra PIM: Configuring Just-in-Time Admin Access
Step-by-step guide to deploying Microsoft Entra Privileged Identity Management (PIM) for just-in-time role activation, approval workflows, access reviews,...
- News
Gartner Identifies the Top 6 Cybersecurity Trends Reshaping
Agentic AI oversight, post-quantum migration, AI-driven SOCs, and regulatory volatility lead Gartner's annual cybersecurity trend forecast as the threat...