Why IAM Leaders Must Confront Bias Heads-On

Anna Delaney • March 12, 2026

Bias embedded in identity systems can exclude entire communities from fully participating in the services they rely on. Authentic leadership is what brings those blind spots into the open and drives better design, says Melissa Carvalho, vice president for global security IAM at Royal Bank of Canada.

►

Artificial Intelligence & Machine Learning

Selling Cyber: PAM Market Shifts as AI Drives New Demands

Latest

Cybercrime

Trump's Cyber Strategy Puts Private Sector on the Offensive

Jennifer Lawinski • March 13, 2026

The Trump administration's national cyber strategy calls for a stronger partnership between the federal government and private companies, heralding a shift in the ways private enterprise could participate in offensive operations against nation-state adversaries, ransomware gangs and cybercriminals.

Events

Privilege-Centric Identity Security Redefines PAM

Tony Morbin • March 13, 2026

Privileged access management has moved from password vaulting toward broader identity protection. Organizations now focus on every identity that could reach sensitive systems, says Morey Haber, chief security advisor at BeyondTrust.

Artificial Intelligence & Machine Learning

Bold Launches With $40M to Target AI Risks on Endpoints

Michael Novinson • March 13, 2026

Bold Security exited stealth with $40 million to build an endpoint platform for the artificial intelligence era. CEO Nati Hazut said companies can no longer rely on older controls as employees and AI agents access data locally, creating new blind spots around apps, files and device activity.

Events

Identity and Data Security Converge in the AI Era

Anna Delaney • March 13, 2026

Security teams once treated identity security and data security as separate disciplines. AI systems blur that boundary because they focus on permissions and data access rather than internal security structures, says Tyler Reese, vice president of product management at Netwrix.

Artificial Intelligence & Machine Learning

Why Govern-Later AI Policies Will Fail

Tony Morbin • March 13, 2026

Identity teams faced a sharper governance test as AI agents gained autonomy. Henrique Teixeira, senior vice president of strategy at Saviynt, says organizations should build controls into the first deployment, not after sprawl creates the same machine-identity clutter cloud left behind.

Events

Why Identity Threats Push Defense Beyond Malware

Anna Delaney • March 13, 2026

Attackers have shifted from classic malware to valid credentials, cross-domain movement and SaaS abuse. Zeki Turedi, field CTO at CrowdStrike, says defenders need to widen visibility, harden identity paths and detect threats before exploitation spreads across hybrid environments.

Artificial Intelligence & Machine Learning

ISMG Editors: Iran Conflict Expands Into Cyber Warfare

Anna Delaney • March 13, 2026

In this week's panel, four ISMG editors discuss the cyber activity tied to the U.S.-Israel-Iran conflict, the Pentagon's standoff with AI firm Anthropic and a new report that reveals how document fraud reflects deeper weaknesses in verification systems.

Events

Modern Applications Outgrow Role-Based Access Control

Tony Morbin • March 13, 2026

Static, role-based access control no longer matches the complexity of modern applications, APIs and data flows. Attribute- and policy-based, runtime authorization gives security teams more precision, visibility and consistency across systems, says David Brossard, CTO at Axiomatics.

Artificial Intelligence & Machine Learning

Chrome Patches Bug That Let Extensions Spy Via Gemini

Rashmi Ramesh • March 13, 2026

Researchers at Palo Alto Networks' Unit 42 found a high-severity flaw in Chrome's Gemini AI panel that could have let rogue browser extensions access local files, cameras and microphones without user knowledge. Google has issued a patch.

Geo-Specific

New European Emissions Regs Include Cybersecurity Rules

David Meyer • March 13, 2026

Automakers are generally on track to implement new EU cybersecurity requirements in tailpipe emissions regulations instigated by the long shadow of Volkswagen's emissions scandal, but there could be a clash between those new rules and others that are intended to guarantee the right-to-repair.

AI-Driven Security Operations

Autonomous Agent Hacked McKinsey's AI in 2 Hours

Rashmi Ramesh • March 13, 2026

Security startup CodeWall disclosed this week that its autonomous AI agent breached McKinsey's internal AI platform Lilli in two hours on Feb. 28, accessing tens of millions of messages and hundreds of thousands of files through a basic, years-old database flaw.

Healthcare

How Main Line Health Secures Devices With Microsegmentation

Marianne Kolbasuk McGee • March 13, 2026

An identity-based microsegmentation deployment at Main Line Health in Philadelphia is helping to control how its roughly 60,000 devices communicate across the network in order to protect clinical operations and limit the impact of potential cyberattacks, said Main Line Health CISO Aaron Weismann.