Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

On April 2, 1796, a full house packed the Drury Lane Theatre in London, eager to witness the first showing of a newly discovered Shakespeare play. The problem was that William Henry Ireland wrote the play, Vortigern, and the entire production was a hoax. Although there was some controversy before opening day, several experts reviewed the manuscript and supporting documents and confirmed that the play was a long-lost Shakespeare original.

Five worthy reads is a regular column on five noteworthy items we’ve discovered while researching trending and timeless topics. This week, we learn more about synthetic identity fraud.

Enable secure Single Sign-On (SSO) access to your Staff Members and add an unlimited number of staff members in Shopify Admin to manage your Shopify Store. You can completely own your Shopify Store by restricting your staff member’s access based on tags assigned to them. Login from multiple IDPs is also supported which will help in authenticating users from different IDPs for your Plus & Non-plus Shopify Store.

Connect Okta & Shopify with any apps on the web using Okta Integration with Shopify with Okta as IDP. Enable secure SSO into Shopify Plus and Non-Plus stores, streamlining access for both customers and employees. Okta is a platform in the Identity-as-a-Service (IDaaS) category, meaning it allows you, your colleagues, or customers access to all other (company) software with a single set of login credentials.

Shopify's recent update introduces advanced extensibility features for Shopify customer accounts, significantly enhancing both Direct-to-Consumer (DTC) and Business-to-Business (B2B) customer accounts. This update allows for more seamless and customizable customer interactions, boosting satisfaction and operational efficiency for both types of customers. Shopify has revealed that developers can now access customer accounts using customer account UI extensions, which are currently in developer preview.

When someone registers for an online service or healthcare portal, logs into an eCommerce store, or uses a streaming platform, the first interaction usually involves identity and authentication. For businesses, this moment is critical because it connects security, customer experience, and trust.

The Digital Statute for Children and Adolescents (Digital Estatuto da Criança e do Adolescente or Lei 15.211/2025) is a new law outlining age assurance (garantia de idade) requirements in Brazil. Also known as the Digital ECA, it was enacted in September 2025 and goes beyond self-attestation, applying to a wider range of online platforms that offer certain services. On March 17, 2026, the Digital ECA will become enforceable.

Shopify has officially deprecated Legacy Customer Accounts as of February 2026, marking a major shift in how customer authentication works across Shopify stores. It has also been confirmed that a final sunset date will be announced later in 2026, after which legacy templates will be locked from editing and eventually removed.

In 2022, Uber's systems were breached by an 18-year-old. Multi-Factor Authentication (MFA) was active, but the attackers flooded an employee's phone with push requests until they approved one, just to stop the annoyance. Authentication worked as designed, and the attacker got in. This is, in general terms, an MFA fatigue attack. Fast forward to Q1 2025. Rapid7 found that more than 56% of all compromises resulted from stolen credentials where no MFA was in place.