#Identity
All CosmicBytez Labs articles tagged #Identity, across news, security advisories, how-to guides, and projects.
- News
Microsoft Reminds Admins to Migrate Entra ID Users to Passkeys Before SMS Retirement
Microsoft is retiring SMS first-factor sign-in for Entra ID on February 1, 2027, and is urging admins to move users to passkeys now.
- News
Dropbox Accounts Breached Through Lenovo Email Verification Flaw
A flaw in Lenovo's email verification let attackers register fake Lenovo IDs and silently access ~5,000 Dropbox accounts via SSO.
- News
Cyera's $1B Oasis Security Acquisition Is All About AI Agent Control
Cyera acquires Oasis Security for $1 billion to unify data security and identity into a single AI agent control plane.
- News
Critical Flaws Discovered in Belgian eID Software Used by 2 Million People
Security researchers uncovered critical vulnerabilities in Belgium's eID middleware software, affecting eight of the country's ten largest banks and over...
- News
Every AI Agent Is an Identity. Most Organizations Don't Treat Them That Way
AI agents can access databases, trigger workflows, deploy code, and interact with critical business systems — often with little oversight. Token Security...
- News
Tycoon2FA Hijacks Microsoft 365 Accounts via Device-Code
The Tycoon2FA phishing-as-a-service platform has added device-code phishing to its arsenal and abuses Trustifi click-tracking URLs to bypass Microsoft 365...
- News
Microsoft to Roll Out Entra Passkeys on Windows in Late
Microsoft is rolling out passkey support for phishing-resistant passwordless authentication to Microsoft Entra-protected resources from Windows devices...
- Project
Keycloak SSO: Self-Hosted Identity Provider for Your Homelab
Deploy Keycloak with Docker Compose and PostgreSQL to build a centralised single sign-on platform for your homelab services, with OIDC integration for...
- HOWTO
Microsoft Entra PIM: Configuring Just-in-Time Admin Access
Step-by-step guide to deploying Microsoft Entra Privileged Identity Management (PIM) for just-in-time role activation, approval workflows, access reviews,...
- HOWTO
Conditional Access Policies: Zero Trust with Entra ID
Implement Zero Trust security with Microsoft Entra ID Conditional Access. Covers named locations, device compliance, risk-based policies, and...