Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

How miniOrange's GPT App Connects LLMs to Your WordPress Site

WordPress is entering a new phase in how websites are managed with the introduction of API Abilities and support for the Model Context Protocol (MCP). These updates allow WordPress core, plugins, and themes to clearly define the actions they support and how those actions should be executed. For the first time, WordPress can communicate its capabilities in a structured way that large language models can reliably understand.

What is Credential Stuffing? A Complete Prevention Guide for Enterprises

Credential stuffing attacks have become one of the most common, yet underestimated, cybersecurity threats facing businesses today. Even with strong firewalls and the latest endpoint protection, organizations still lose millions every year to stolen login credentials reused across accounts. What’s worse, these attacks often stay undetected until real damage occurs, which includes data breaches, customer account takeovers, and regulatory penalties.

Making Student and Staff Logins Easy on WordPress with LDAP

Managing student and staff logins across different school systems can be messy and unmanageable, especially when every portal requires its own account and password. For WordPress-based education sites, it often means IT teams are stuck creating user accounts manually, resetting passwords, or dealing with duplicate profiles.

2FA For WordPress Membership: 2FA for Membership Sites

Imagine this: your WordPress membership site, thriving with exclusive content and a growing base of loyal members. But what if one breach could shatter trust, expose sensitive data, and compromise your revenue stream? That’s where WordPress Two-Factor Authentication (2FA) steps in as your ultimate defence. Let’s dive into how WordPress 2FA transforms your WordPress membership site into an impregnable fortress and why it’s a must-have for any modern membership platform.

Why identity security is foundational for crypto agility in the post-quantum era

Cryptographic failures have a knack for turning a quiet weekend into a chaotic, all-hands-on-deck emergency. Consider the SHA-1 to SHA-2 deprecation, sometimes referred to as “Shapocalypse,” which sent teams scrambling to reissue thousands of certificates and exposed how many legacy systems weren’t ready for stronger hash algorithms. The major Certificate Authority (CA) distrust events involving DigiNotar in 2011, Symantec in 2017-18, and Entrust in 2024-25 created similar disruption.

How autonomous AI agents like OpenClaw are reshaping enterprise identity security

The viral surge of OpenClaw (formerly Clawdbot and Moltbot) has captured the tech world’s imagination, amassing over 160,000 GitHub stars and driving a hardware rush for Mac Minis to host these 24/7 assistants.

One Identity Appoints Gihan Munasinghe as Chief Technology Officer

One Identity, a leader in unified identity security, today announced the appointment of Gihan Munasinghe as Chief Technology Officer. Munasinghe brings more than 15 years of experience leading global engineering organizations and delivering large-scale, customer-centric software platforms. In this role, he will lead the engineering organization and set technology strategy, prioritizing innovation that best serves customers as their security, operational, and deployment needs evolve.

Dinari bridges traditional markets and digital assets - S2E09

In this episode, we're excited to introduce Brandon Ooi, the COO of Dinari, a fintech innovator making compliant tokenized securities accessible to investors. Brandon co-founded Crunchyroll as its CTO and worked at Stripe as an engineer specializing in marketplace enterprises, bringing deep technical expertise and product leadership to the intersection of traditional finance and blockchain technology. Join us as we explore Brandon's journey from building beloved consumer platforms to pioneering the future of securities trading, and how Dinari is bridging the gap between traditional markets and digital assets.

7 ways synthetic identity fraud is changing in 2026

Synthetic identity fraud used to be a specialty fraud job. Bad actors created synthetic identities by modifying personal information, combining multiple real identities, or combining real and fake information. But building up identities convincing enough to pass muster took time, research, and effort. As a result, you typically saw synthetic identity fraud when bad actors targeted organizations that could pay off in a significant way.

Contain the SSO blast radius: Identity security beyond MFA

Over the past week, multiple research teams have documented a renewed wave of voice-led social engineering (vishing) targeting identity providers and federated access. The entry point is not through malware or a zero-day exploit. The goal is simple. Persuade a user to help complete authentication in real time, then use that trusted session to move through SaaS applications and exfiltrate data. Security leaders already know the fundamentals. Multi-factor authentication (MFA) can be socially engineered.