| Astrix Security | Agent Identity | Agentic Identity / NHI |
| Aembit | Agent Identity | Agentic Identity / NHI |
| Keycard | Agent Identity | Agentic Identity / NHI |
| Descope | Agent Identity | Agentic Identity / NHI |
| AgentCordon | Agent Identity | Agentic Identity / NHI |
| AI Agent Authentication and Authorization | Agent Identity | Agentic Identity / NHI |
| Detecting Malicious Entra OAuth Apps with LLM-Based Permission Risk | Agent Identity | Agentic Identity / NHI |
| CIMD - OAuth Client ID Metadata Documents | Agent Identity | Agentic Identity / NHI |
| SEP-991: Enable URL-based Client Registration using OAuth Client ID | Agent Identity | Agentic Identity / NHI |
| RFC: Simplify OAuth with Domain-as-Client-ID Principle - Alternativ | Agent Identity | Agentic Identity / NHI |
| Authorize every prompt. Authenticate every agent. | Agent Identity | Agentic Identity / NHI |
| How to Secure Agents using OAuth — Jared Hanson (Keycard, Passpor | Agent Identity | Agentic Identity / NHI |
| Keycard is identity infrastructure for the agent-native world | Agent Identity | Agentic Identity / NHI |
| Will AI Agents Force Us to Finally Do Auth Right? | Agent Identity | Agentic Identity / NHI |
| AI agent identity: it's just OAuth | Agent Identity | Agentic Identity / NHI |
| $82,000 in 48 Hours from stolen Gemini API Key. My monthly Usage | Agent Identity | Agentic Identity / NHI |
| CLI Installer – AuthKit – WorkOS Docs | Agent Identity | Agentic Identity / NHI |
| CLI proxy that reduces LLM token consumption b | Agent Identity | Agentic Identity / NHI |
| US Secretary of War Pete Hegseth: Today, we are unleashing https://t.co/7ZlxYquxk3 This | Agent Identity | Agentic Identity / NHI |
| modelcontextprotocol/docs/specification/draft/basic/authorization.m | Agent Identity | Agentic Identity / NHI |
| Extensions to authorization | Agent Identity | Agentic Identity / NHI |
| Back in July, Neeraj Gupta introduced DeepPass2, a smarter secret scanner that | Agent Identity | Agentic Identity / NHI |
| Securing your agents with authentication and authorization | Agent Identity | Agentic Identity / NHI |
| MCP server for the Delinea Secret | Agent Identity | Agentic Identity / NHI |
| How Pixel and Android are bringing a new level of trust to | Agent Identity | Agentic Identity / NHI |
| I've seen a lot of complaints about how MCP isn't ready for | Agent Identity | Agentic Identity / NHI |
| ngalongc/AuthzAI | Agent Identity | Agentic Identity / NHI |
| Introducing Agentic Wallets, our first ever wallet infrastructure built specifically for autonomous | Agent Identity | Agentic Identity / NHI |
| Paid + GitLaw: Introducing Legal Contracts Built for AI Agents - Pa | Agent Identity | Agentic Identity / NHI |
| Introducing SpiceBox and spicedb-dev | Agent Identity | Agentic Identity / NHI |
| A Comprehensive Formal Security Analysis of OAuth 2.0 | Agent Identity | Agentic Identity / NHI |
| Abusing Delegated Permissions via Easy Auth | Agent Identity | Agentic Identity / NHI |
| Abusing Intune Permissions for Lateral Movement and Privilege Escalation in Entra ID Native Environments | Agent Identity | Agentic Identity / NHI |
| AC2 Protocol - cryptographic control and verifiable actions for AI agents | Agent Identity | Agentic Identity / NHI |
| Agent Auth by Vigil - DID identity and authentication for AI agents | Agent Identity | Agentic Identity / NHI |
| Agent Auth Protocol - open standard for AI agent authentication and capability-based authorization | Agent Identity | Agentic Identity / NHI |
| Agent identity: a new access model for autonomous, team-wide AI | Agent Identity | Agentic Identity / NHI |
| agent-directory - first-class AI agent identities in Active Directory | Agent Identity | Agentic Identity / NHI |
| Agents can now create Cloudflare accounts, buy domains, and deploy | Agent Identity | Agentic Identity / NHI |
| AgentsID - Identity for AI Agents | Agent Identity | Agentic Identity / NHI |
| AI Agents act for a person - Not just as themselves | Agent Identity | Agentic Identity / NHI |
| Announcing Keycard for Coding Agents | Agent Identity | Agentic Identity / NHI |
| Announcing Keycard for Multi-Agent Apps: Auth for Agentic Systems | Agent Identity | Agentic Identity / NHI |
| Announcing Microsoft Entra Agent ID: Secure and manage your AI agents | Agent Identity | Agentic Identity / NHI |
| Announcing native AI agent support in HashiCorp Vault | Agent Identity | Agentic Identity / NHI |
| Apono - Just-in-Time Cloud Permission Management and Agentic Privileged Access | Agent Identity | Agentic Identity / NHI |
| AppTotal - OAuth app posture and permission analysis | Agent Identity | Agentic Identity / NHI |
| Attacking Entra Metaverse, Part 1 - SpecterOps | Agent Identity | Agentic Identity / NHI |
| auth.md - open protocol for AI agent registration and user-scoped credentials | Agent Identity | Agentic Identity / NHI |
| Azure's Hidden Operators: A Threat Model for Platform-Level Managed Identities | Agent Identity | Agentic Identity / NHI |
| BloodHound Enterprise Expands Beyond Microsoft: Mapping Identity Attack Paths Across Okta, GitHub, and Mac | Agent Identity | Agentic Identity / NHI |
| Border0 is joining Tailscale - modern privileged access management | Agent Identity | Agentic Identity / NHI |
| Borrowing Windows Hello keys for authentication and persistence | Agent Identity | Agentic Identity / NHI |
| CAPSlock - Offline Entra Conditional Access policy analysis tool | Agent Identity | Agentic Identity / NHI |
| Claude API Workload Identity Federation - short-lived identity tokens instead of static API keys | Agent Identity | Agentic Identity / NHI |
| Creating immutable users through a bug in Entra ID restricted administrative units | Agent Identity | Agentic Identity / NHI |
| CrowdStrike to Acquire SGNL to Secure Every Identity in the AI Era | Agent Identity | Agentic Identity / NHI |
| CVE-2025-47949 Reveals Flaw in samlify That Opens Door to SAML Single Sign-On Bypass | Agent Identity | Agentic Identity / NHI |
| CVE-2026-1529 - Keycloak unauthorized organization registration via improper invitation token validation | Agent Identity | Agentic Identity / NHI |
| Emilien Socchi on AzRoleWatcher detecting 12 new Azure application permissions | Agent Identity | Agentic Identity / NHI |
| Enterprise-Managed Authorization: Zero-touch OAuth for MCP | Agent Identity | Agentic Identity / NHI |
| Entra ID Attack Paths | Agent Identity | Agentic Identity / NHI |
| Entra Identity Governance Portal - self-hosted Entra ID app and identity risk governance | Agent Identity | Agentic Identity / NHI |
| Entra Token Broker - secretless federated auth for Entra-joined devices | Agent Identity | Agentic Identity / NHI |
| EntraOps Classification Explorer - privileged role and permission tiering for Entra ID and Azure | Agent Identity | Agentic Identity / NHI |
| FerrisKey - open-source cloud-native IAM written in Rust | Agent Identity | Agentic Identity / NHI |
| FIDO Cross Device Phishing | Agent Identity | Agentic Identity / NHI |
| GitHub Copilot SDK - Azure managed identity setup | Agent Identity | Agentic Identity / NHI |
| Giving OpenClaw Its Own Identity, And a Sandbox to Run In | Agent Identity | Agentic Identity / NHI |
| GraphSpy - the Swiss Army Knife for attacking M365 and Entra | Agent Identity | Agentic Identity / NHI |
| HashiCorp Boundary LDAP authentication | Agent Identity | Agentic Identity / NHI |
| How Okta Passwords Can Be Compromised: Uncovering a Risk to User Data | Agent Identity | Agentic Identity / NHI |
| Human Principal - privacy-preserving proof that a human is behind an agent, by Auth0Lab | Agent Identity | Agentic Identity / NHI |
| Identity as a New Security Perimeter - ISACA | Agent Identity | Agentic Identity / NHI |
| Identity Management for Agentic AI - OpenID Foundation whitepaper | Agent Identity | Agentic Identity / NHI |
| Identity Management for Agentic AI: The New Frontier of Authorization, Authentication, and Security | Agent Identity | Agentic Identity / NHI |
| Identity Providers for RedTeamers | Agent Identity | Agentic Identity / NHI |
| Just-in-time approval workflow with Boundary and Azure | Agent Identity | Agentic Identity / NHI |
| Macaroons: Cookies with Contextual Caveats for Decentralized Authorization in the Cloud | Agent Identity | Agentic Identity / NHI |
| Martez Reed on workload identity for Proxmox via an AWS-style metadata server | Agent Identity | Agentic Identity / NHI |
| Nathan McNulty on using evilginx-captured ESTSAUTH cookies to auto-register a passkey | Agent Identity | Agentic Identity / NHI |
| NHInsight - find risky non-human identities and access paths across clouds | Agent Identity | Agentic Identity / NHI |
| Oasis Security Research Uncovers Microsoft Azure MFA Bypass | Agent Identity | Agentic Identity / NHI |
| obo-wash - persistent Azure AD credentials via on-behalf-of flow | Agent Identity | Agentic Identity / NHI |
| Obtaining Microsoft Entra Refresh Tokens | Agent Identity | Agentic Identity / NHI |
| Oh-Auth: Abusing OAuth to take over millions of accounts | Agent Identity | Agentic Identity / NHI |
| OhAuth - community OAuth index for auditing over-privileged apps | Agent Identity | Agentic Identity / NHI |
| Okta AD/LDAP Delegated Authentication - Username Above 52 Characters Advisory | Agent Identity | Agentic Identity / NHI |
| Okta brings first-class identity to AI agents with Agent SSO | Agent Identity | Agentic Identity / NHI |
| Okta buys AI security startup Permiso - source says for about $200M | Agent Identity | Agentic Identity / NHI |
| Okta for Red Teamers - TrustedSec post-exploitation techniques against Okta | Agent Identity | Agentic Identity / NHI |
| Okta with Axiom Security: Delivering robust privileged access for modern infrastructure in the AI era | Agent Identity | Agentic Identity / NHI |
| One Token to rule them all - obtaining Global Admin in every Entra ID tenant via Actor tokens | Agent Identity | Agentic Identity / NHI |
| OneLogin, Many Secrets: Clutch Uncovers Critical API Vulnerability Exposing Client Credentials | Agent Identity | Agentic Identity / NHI |
| Open-sourcing OpenPubkey SSH - OPKSSH - integrating single sign-on with SSH | Agent Identity | Agentic Identity / NHI |
| OpenClaw bug: gateway overwrites fresh OAuth token with stale cached state on startup | Agent Identity | Agentic Identity / NHI |
| OrcaID - an account in your agent's name | Agent Identity | Agentic Identity / NHI |
| Orion Belt - Self-hosted SSH/RDP access gateway with PAM workflows | Agent Identity | Agentic Identity / NHI |
| Otterize - Intent-Based Access Control for Kubernetes Workload IAM | Agent Identity | Agentic Identity / NHI |
| Permissions in the Age of AI-Driven Companies | Agent Identity | Agentic Identity / NHI |
| Persistence via App Registration in Entra ID | Agent Identity | Agentic Identity / NHI |
| Phishing for Codes: Russian Threat Actors Target Microsoft 365 OAuth Workflows | Agent Identity | Agentic Identity / NHI |
| Phishing for Primary Refresh Tokens and Windows Hello keys | Agent Identity | Agentic Identity / NHI |
| Potential Risk of Privilege Escalation in Azure AD Applications | Agent Identity | Agentic Identity / NHI |
| Public Disclosure: Backdooring Managed Identities via Azure API Management | Agent Identity | Agentic Identity / NHI |
| Securing the Agentic Workforce: Cisco Announces Intent to Acquire Astrix Security | Agent Identity | Agentic Identity / NHI |
| Silent provisioning of FIDO key to use for headless requests against hidden APIs | Agent Identity | Agentic Identity / NHI |
| Snowflake to Acquire Natoma to Bring Governed Agentic Access to the Enterprise | Agent Identity | Agentic Identity / NHI |
| SSO Gadgets: Escalate Self-XSS to Account Takeover via OAuth2 and OIDC | Agent Identity | Agentic Identity / NHI |
| Supporting more identity providers on Ubuntu with the new Authd OIDC broker | Agent Identity | Agentic Identity / NHI |
| The Authorization Code grant in excruciating detail - Part 2 of 2 | Agent Identity | Agentic Identity / NHI |
| The complete guide to protecting your APIs with OAuth2 - part 1 | Agent Identity | Agentic Identity / NHI |
| The Hallucination Defense - why logs make 'the AI did it' the perfect excuse | Agent Identity | Agentic Identity / NHI |
| The Human Root of Trust - framework for cryptographic accountability in agent systems | Agent Identity | Agentic Identity / NHI |
| The Ultimate Guide To Non-Human Identities - NHI Mgmt Group | Agent Identity | Agentic Identity / NHI |
| Tony Dang announces Agent Vault - open source credential proxy and vault for agents | Agent Identity | Agentic Identity / NHI |
| Traveling with OAuth - Account Takeover on Booking.com | Agent Identity | Agentic Identity / NHI |
| Understanding the Complete Identity Management Ecosystem: IAM, CIAM, PAM Explained | Agent Identity | Agentic Identity / NHI |
| unix-oidc - OIDC authentication for Unix/Linux | Agent Identity | Agentic Identity / NHI |
| Vorim AI - trust layer for AI agents with cryptographic identity and audit trails | Agent Identity | Agentic Identity / NHI |
| Warden - secure gateway connecting AI agents to enterprise systems | Agent Identity | Agentic Identity / NHI |
| Why is OAuth still hard in 2026 - lessons from implementing OAuth for 50 popular APIs | Agent Identity | Agentic Identity / NHI |
| World - World ID proof of human network for the AI era | Agent Identity | Agentic Identity / NHI |
| Yubico and Delinea Close the Agentic AI Accountability Gap | Agent Identity | Agentic Identity / NHI |
| Yubico will introduce secure and privacy capable passkey enabled digital signatures in upcoming 5.8 firmware | Agent Identity | Agentic Identity / NHI |
| Zeko Labs - Agent Mission-Bound Auth: cryptographically verified autonomous agent workflows | Agent Identity | Agentic Identity / NHI |
| Okta - Understanding AI Agent Identity | MCP (Model Context Protocol) | General Reading |