Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

What AI agents for compliance should (and shouldn't) automate

Compliance is a hard place to deploy AI. Regulations differ by country and change constantly, and AI isn't deterministic the way traditional software is. Lewis Chung, agents lead at Persona, explain how we build AI agents for compliance by: testing agent behavior with evaluations on domain-specific datasets until errors are negligible in production, automating simple low-risk decisions, and keeping people in the loop for high-stakes or ambiguous calls like freezing a customer's account. In those cases, the agent does the exhaustive research and presents it so a human can decide quickly.

How IAM Supports GDPR's Right to Be Forgotten

Deleting a user account takes seconds. Deleting everything your organization knows about that user is a much bigger job. When a customer invokes their right to be forgotten, their profile in your identity provider is only the starting point, because their details also live in your CRM, support desk, billing tool, analytics platform, and a few SaaS apps your marketing team connected last year. Every one of those copies has to be found and dealt with before the legal deadline.

eMudhra CA Key Exposure: How miniOrange PAM Enables Control

The eMudhra CA key exposure involved eight intermediate certificates generated with weak private keys. Although the affected intermediates had not issued publicly trusted end-entity certificates, changes to certificate trust stores created a need to identify dependencies and plan certificate replacement across affected environments.

What is Identity Manager? | One Identity | IGA

What is One Identity Manager? It’s an identity governance and administration (IGA) solution that automates user provisioning, access requests, access certification, and role management across on-premises, hybrid, and cloud environments. Watch this overview to see how Identity Manager helps you enforce least privilege, close compliance gaps, and manage the full identity lifecycle from joiner to mover to leaver. Learn more about identity governance and administration at oneidentity.com.#IGA.

Account takeover (ATO) uncovered: multi-signal strategies for marketplaces

Unfortunately, account takeover (ATO) schemes are all too familiar to any marketplace. A bad actor infiltrates a high-value buyer or seller account and commits fraud, causing reputational risk and financial harm. While the tactics haven’t changed, new fraud tools have skyrocketed ATO into a $13 billion problem. To combat this growing threat on your platform or marketplace, you must look beyond point solutions, which only catch the most obvious cases, and adopt a sophisticated, multi-signal approach.

Strengthening Identity Assurance: Combatting Social Engineering with Duo Identity Verification

Social engineering accounts for 60% of identity-related breaches. By exploiting human trust during helpdesk interactions and remote onboarding, threat actors can use people to attack systems. Traditional MFA alone can’t stop these attacks when they bypass authentication entirely. Watch this discussion with industry experts Landy Naylor (Senior Product Manager at Cisco Duo) and Bobby Baek (Manager, Sales Engineering at Persona). We’ll cover how Duo Identity Verification, powered by Persona, adds high-assurance identity verification to helpdesk and remote onboarding workflows.

Deepfakes and AI-based fraud: Strategies to protect your business

For years, fraudsters have used generative AI to bypass identity and liveness checks. Unfortunately, as generative AI models improve and new models are released, fraudsters also improve and expand their ability to spoof identity verification systems. The result? Preventing fraud has never been more challenging.
Featured Post

AI Agents Are Rewriting the Rules of Identity Security

For years, identity security has been based on a fairly straightforward premise: organisations need to know who, or what, is accessing their systems, what they are authorised to do, and whether that access remains appropriate. However, the rise of autonomous AI agents has changed the game, and tore-up the traditional model of role-based access controls and privileged access management.