The only Customer Identity and Access Management (CIAM) with hybrid, single-tenant deployment you can dev and test anywherehttps://bsky.app/profile/fusionauth.iohttps://bsky.app/profile/fusionauth.io/post/3mvb5yisp4d2jHomegrown Auth Is a Business Continuity Risk, Not Just a Security Risk https://fusionauth.io/blog/homegrown-auth-business-continuity-risk11 Sep 2026 18:09 +0000at://did:plc:dr7kce7aobcymnlldwebimyi/app.bsky.feed.post/3mvb5yisp4d2jhttps://bsky.app/profile/fusionauth.io/post/3mv6bh5nqg22jWho Actually Owns Customer Identity in Your Organization? https://fusionauth.io/blog/who-owns-customer-identity10 Sep 2026 14:33 +0000at://did:plc:dr7kce7aobcymnlldwebimyi/app.bsky.feed.post/3mv6bh5nqg22jhttps://bsky.app/profile/fusionauth.io/post/3mv4irt2kxd23MCP Client Registration: Dinner Party Or Nightclub? https://fusionauth.io/blog/cimd-vs-dcr09 Sep 2026 21:39 +0000at://did:plc:dr7kce7aobcymnlldwebimyi/app.bsky.feed.post/3mv4irt2kxd23https://bsky.app/profile/fusionauth.io/post/3muzuvmejnv2jWhen engineers ignore the AI tools you've invested in, it’s not just a matter of adoption, it’s a procurement issue. Dan Moore points out that if you can’t pinpoint the problem your tool solves, measure its impact, and show improvements, you're just following trends. https://leaddev.com/ai/you-bought-the-ai-tool-are-your-engineers-using-it?utm_source=Bluesky08 Sep 2026 20:38 +0000at://did:plc:dr7kce7aobcymnlldwebimyi/app.bsky.feed.post/3muzuvmejnv2jhttps://bsky.app/profile/fusionauth.io/post/3mukghv74qu2cAttackers are targeting US water systems by exploiting long-standing weaknesses, not AI. Essential defenses like patching, limiting internet exposure, strong access controls, and proper authentication are vital. Check out Dan Moore's insights in Route Fifty: https://www.route-fifty.com/cybersecurity/2026/08/states-feds-scramble-prevent-more-water-cyberattacks/415670/?utm_source=Bluesky02 Sep 2026 17:10 +0000at://did:plc:dr7kce7aobcymnlldwebimyi/app.bsky.feed.post/3mukghv74qu2chttps://bsky.app/profile/fusionauth.io/post/3muhvywxd4f2vA translation plugin on 400,000 WordPress sites exposed admin password-reset links via a public API. Two seemingly harmless features combined, allowing attackers access to admin accounts. Check out Dan Moore's insights on the TranslatePress flaw: https://itnerd.blog/2026/08/27/400000-wordpress-sites-impacted-by-account-takeover-vuln-in-translatepress-plugin/?utm_source=Bluesky01 Sep 2026 17:10 +0000at://did:plc:dr7kce7aobcymnlldwebimyi/app.bsky.feed.post/3muhvywxd4f2vhttps://bsky.app/profile/fusionauth.io/post/3mufysuvzus2zNew episode of the Maintainable Software Podcast! 🎙️ Join David Hayes from FusionAuth as he discusses why boring software wins. Dive into topics like long-lasting API decisions and the impact of technical debt on customer outcomes. Listen here: https://maintainable.fm/episodes/david-hayes-boring-software-clear-incentives-and-better-checklists?utm_source=Bluesky31 Aug 2026 22:55 +0000at://did:plc:dr7kce7aobcymnlldwebimyi/app.bsky.feed.post/3mufysuvzus2zhttps://bsky.app/profile/fusionauth.io/post/3mudi2wbaz227🚨 400k WordPress sites compromised due to weak API authentication! An attacker exploited this by requesting an admin password reset link. This breach emphasizes the importance of user context segregation for security. Full story and @mooreds.com quote at: https://itnerd.blog/2026/08/27/400000-wordpress-sites-impacted-by-account-takeover-vuln-in-translatepress-plugin/?utm_source=Bluesky30 Aug 2026 22:50 +0000at://did:plc:dr7kce7aobcymnlldwebimyi/app.bsky.feed.post/3mudi2wbaz227https://bsky.app/profile/fusionauth.io/post/3mu5w3qtx4x2pA rogue app hits a wall and stops. An AI agent? It finds a way around it. Dave Hayes, VP of Product, dives into the shift in shadow AI: unsanctioned apps connect to one system, while agents connect to many, pushing past obstacles. Read more from Tech News Vision: https://technewsvision.co.uk/invisible-ai-agents-creating-new-enterprise-security-risks/?utm_source=Bluesky28 Aug 2026 17:45 +0000at://did:plc:dr7kce7aobcymnlldwebimyi/app.bsky.feed.post/3mu5w3qtx4x2phttps://bsky.app/profile/fusionauth.io/post/3mtz4qym5bi2gRelease 1.69.0 https://fusionauth.io/docs/release-notes#version-1-69-026 Aug 2026 20:01 +0000at://did:plc:dr7kce7aobcymnlldwebimyi/app.bsky.feed.post/3mtz4qym5bi2ghttps://bsky.app/profile/fusionauth.io/post/3mtyjpc2omj2sAI didn't create the identity problem. It removed the speed limit https://fusionauth.io/blog/announcing-fusionauth-1-6926 Aug 2026 14:20 +0000at://did:plc:dr7kce7aobcymnlldwebimyi/app.bsky.feed.post/3mtyjpc2omj2shttps://bsky.app/profile/fusionauth.io/post/3mtmdohhqy22sValid provenance can still lead to malware. In the AsyncAPI attack, attackers exploited trusted pipelines to deliver backdoored packages. @mooreds.com from FusionAuth explains that malicious code activates upon library import, not installation. Read more: https://www.reversinglabs.com/blog/why-software-delivery-cannot-depend-on-trust-alone?utm_source=Bluesky21 Aug 2026 18:00 +0000at://did:plc:dr7kce7aobcymnlldwebimyi/app.bsky.feed.post/3mtmdohhqy22shttps://bsky.app/profile/fusionauth.io/post/3mtelqxkywr2tYou wouldn’t hand a contractor a master key, so why let AI agents access your infrastructure without oversight? Join Dan Moore on the Security Strategist Podcast to discover why unique identities for AI agents are vital for security. Listen: https://em360tech.com/podcasts/why-identity-becoming-securitys-new-front-line?utm_source=Bluesky18 Aug 2026 16:03 +0000at://did:plc:dr7kce7aobcymnlldwebimyi/app.bsky.feed.post/3mtelqxkywr2thttps://bsky.app/profile/fusionauth.io/post/3mtcqdgmu4u2pAttackers are logging in, not breaking through firewalls. Ensure AI agents use short-lived identity rules to prevent insider threats. Service accounts aren’t enough—opt for scoped tokens! Check out this report by TechnologyAdvice, sponsored by FusionAuth: https://fusionauth.io/ebooks/inside-the-ciso-stack?utm_source=Bluesky17 Aug 2026 22:20 +0000at://did:plc:dr7kce7aobcymnlldwebimyi/app.bsky.feed.post/3mtcqdgmu4u2phttps://bsky.app/profile/fusionauth.io/post/3mt2qg2gr5w22Fake accounts are exploiting free credits to resell cheap AI tokens. To combat this, decouple credits from signup. Insights from Dave Hayes, VP of Product at FusionAuth: https://itnerd.blog/2026/08/08/poison-claude-selling-discounted-ai-tokens-built-on-fake-accounts-and-free-credits/?utm_source=Bluesky14 Aug 2026 18:00 +0000at://did:plc:dr7kce7aobcymnlldwebimyi/app.bsky.feed.post/3mt2qg2gr5w22https://bsky.app/profile/fusionauth.io/post/3msxy4fe6aw2kAI adoption is skyrocketing, but 68% of teams lack clear metrics on its impact. Costs are rising too, with concerns jumping from 35% to 62%. Join @mooreds.com at LeadDev for insights on the AI Impact Report 2026. Details & registration: https://leaddev.com/event/how-ai-is-changing-engineering?utm_source=Bluesky #AI #Engineering #LeadDev13 Aug 2026 15:40 +0000at://did:plc:dr7kce7aobcymnlldwebimyi/app.bsky.feed.post/3msxy4fe6aw2khttps://bsky.app/profile/fusionauth.io/post/3mstaj33vwp2gBlack Hat 2026 felt like #CES! While vendors splurged on flashy booths, the truth remains: attackers are logging in, not breaking in. We focused on real identity infrastructure with our '90s-themed booth instead of gimmicks. Let's chat auth—DM us for a fluff-free sync! #BlackHat202611 Aug 2026 18:27 +0000at://did:plc:dr7kce7aobcymnlldwebimyi/app.bsky.feed.post/3mstaj33vwp2ghttps://bsky.app/profile/fusionauth.io/post/3msqlzi6enz2bTwo-thirds of breaches stem from login issues, highlighting the importance of identity management. In Episode 127 of the SourceForge Podcast, we discuss how in-house customer auth can pose silent security risks. Full episode: www.youtube.com/watch10 Aug 2026 17:15 +0000at://did:plc:dr7kce7aobcymnlldwebimyi/app.bsky.feed.post/3msqlzi6enz2bhttps://bsky.app/profile/fusionauth.io/post/3mseehvab5m2lMFA isn’t foolproof—it’s just a hurdle attackers know how to leap. If your identity pipeline views MFA as a simple pass/fail, you’re overlooking 10 risk signals that can bypass basic 2FA. See them all at https://fusionauth.io/lp/10-attacks-mfa?utm_source=Bluesky05 Aug 2026 20:28 +0000at://did:plc:dr7kce7aobcymnlldwebimyi/app.bsky.feed.post/3mseehvab5m2lhttps://bsky.app/profile/fusionauth.io/post/3msbpelti4v2pWe're live at Black Hat USA! Come find the FusionAuth team at Booth #5642 at Mandalay Bay. Spin to Win kicks off at 4:30pm today. Bingo at 6pm. Come say hello! https://fusionauth.io/event/blackhat-usa-2026?utm_source=Bluesky #BlackHat2026 #BHUSA #FusionAuth #CIAM04 Aug 2026 19:05 +0000at://did:plc:dr7kce7aobcymnlldwebimyi/app.bsky.feed.post/3msbpelti4v2phttps://bsky.app/profile/fusionauth.io/post/3ms6xwmxpo22fEver feel like your auth setup is a ticking time bomb? 💣 Join us at Black Hat Booth #5642, Aug 4–6, Mandalay Bay, Vegas! FusionAuth gives you control with a CIAM platform that's self-hosted or cloud-based. No surprises! https://fusionauth.io/event/blackhat-usa-2026?utm_source=Bluesky #BHUSA #CIAM #AppSec #FusionAuth #Auth03 Aug 2026 17:00 +0000at://did:plc:dr7kce7aobcymnlldwebimyi/app.bsky.feed.post/3ms6xwmxpo22fhttps://bsky.app/profile/fusionauth.io/post/3mrvi2aos2y2sWe're at #BlackHat2026. Booth #5642, August 4–6 in Las Vegas. CIAM that you actually control. No lock-in. Deploy anywhere. Come talk auth or just spin to win. https://fusionauth.io/event/blackhat-usa-2026?utm_source=Bluesky #BHUSA30 Jul 2026 22:22 +0000at://did:plc:dr7kce7aobcymnlldwebimyi/app.bsky.feed.post/3mrvi2aos2y2shttps://bsky.app/profile/fusionauth.io/post/3mrsnotuuzu2qOver 24,000 servers are leaking password hashes due to a 20-year-old flaw in their BMC interfaces. Researchers cracked HPE factory passwords in just a day! Dan Moore from FusionAuth discusses why simply rotating passwords isn't enough: https://itnerd.blog/2026/07/29/thousands-of-servers-leak-authentication-password-hashes-via-20-year-old-vuln-in-bmc-interface/?utm_source=Bluesky 🔒💻29 Jul 2026 19:25 +0000at://did:plc:dr7kce7aobcymnlldwebimyi/app.bsky.feed.post/3mrsnotuuzu2qhttps://bsky.app/profile/fusionauth.io/post/3mrdsd5e4u427FusionAuth Appoints Jamey Miller as SVP of Engineering and Technology https://fusionauth.io/blog/jamey-miller-svp-engineering23 Jul 2026 21:38 +0000at://did:plc:dr7kce7aobcymnlldwebimyi/app.bsky.feed.post/3mrdsd5e4u427https://bsky.app/profile/fusionauth.io/post/3mrdqfzw4tj2uCredential stuffing is still a threat in 2026. @mooreds.com details the Chick-fil-A breach at https://itnerd.blog/2026/07/22/chick-fil-a-breach-exposes-customer-payment-info/?utm_source=Bluesky23 Jul 2026 21:03 +0000at://did:plc:dr7kce7aobcymnlldwebimyi/app.bsky.feed.post/3mrdqfzw4tj2uhttps://bsky.app/profile/fusionauth.io/post/3mrdpnaqjnq2mCredential stuffing continues as users often don't change compromised passwords. @mooreds.com details the Chick-fil-A breach where attackers used new devices and IPs for thousands of rapid attempts. Stronger identity verification could have helped. Read more: https://itnerd.blog/2026/07/22/chick-fil-a-breach-exposes-customer-payment-info/?utm_source=Bluesky23 Jul 2026 20:50 +0000at://did:plc:dr7kce7aobcymnlldwebimyi/app.bsky.feed.post/3mrdpnaqjnq2mhttps://bsky.app/profile/fusionauth.io/post/3mraubpuov72mService accounts and hardcoded keys aren't enough for thousands of autonomous AI agents needing API access. 🤖🔐 In Ep. 72 of Cyber Security Matters, FusionAuth CEO Brian Bell discusses non-human identity security and the shift in CIAM. Listen here: https://fusionauth.io/podcast/ai-agent-authentication-the-future-of-identity-security?utm_source=Bluesky #AI #IdentitySecurity22 Jul 2026 17:35 +0000at://did:plc:dr7kce7aobcymnlldwebimyi/app.bsky.feed.post/3mraubpuov72mhttps://bsky.app/profile/fusionauth.io/post/3mr66jewxta2mNew research: 88% of organizations running AI in production have already had a confirmed or near-miss identity security incident. We walked through the data — nonhuman identities, the confidence paradox, deployment architecture as a risk variable.21 Jul 2026 16:00 +0000at://did:plc:dr7kce7aobcymnlldwebimyi/app.bsky.feed.post/3mr66jewxta2mhttps://bsky.app/profile/fusionauth.io/post/3mqtvxukl5q2jBuild vs. buy for authentication isn't a straightforward answer. It depends on your team size, timeline, and how you factor in compliance overhead. FusionAuth’s Build vs. Buy calculator lets you plug in your actual numbers and see where things land. fusionauth.io/buildvsbuy17 Jul 2026 14:00 +0000at://did:plc:dr7kce7aobcymnlldwebimyi/app.bsky.feed.post/3mqtvxukl5q2jhttps://bsky.app/profile/fusionauth.io/post/3mqrqpmtib32vFusionAuth Launches Intelligent MFA in Latest Release as Demand Surges for Identity Infrastructure Customers Can Control https://fusionauth.io/blog/fusionauth-intelligent-mfa-pr16 Jul 2026 17:21 +0000at://did:plc:dr7kce7aobcymnlldwebimyi/app.bsky.feed.post/3mqrqpmtib32v