--- title: "#identity-security articles | Hashnode" description: "Explore 34 articles tagged #identity-security on Hashnode. Tutorials, guides, and how-tos from the community." url: "https://hashnode.com/tag/identity-security" --- Tag # #identity-security 34 posts · 0 followers [Kazem Mortazavi](https://hashnode.com/@kazem-mortazavi) · [2d ago](https://hashnode.com/posts/itdr-explained-detecting-attackers-who-sign-in-with-valid-credentials/6af15026b2cd53ac96620640) ### [ITDR Explained: Detecting Attackers Who Sign In With Valid Credentials](https://securityland.hashnode.dev/itdr-explained-detecting-attackers-who-sign-in-with-valid-credentials?utm_source=hashnode&utm_medium=feed) An attacker who holds a system administrator's password does not need to break through any wall; they simply sign in. To the firewall, the EDR agent and even the identity management system, an authori 2 min read · [securityland.hashnode.dev](https://securityland.hashnode.dev/itdr-explained-detecting-attackers-who-sign-in-with-valid-credentials?utm_source=hashnode&utm_medium=feed) [Hazel Chirinda](https://hashnode.com/@hazelchirinda) · [5d ago](https://hashnode.com/posts/beyond-mfa-what-occurs-after-an-attacker-gains-access/6aed73f41661c51fa4d5a0df) ### [Beyond MFA: What Occurs After an Attacker Gains Access?](https://hazelsec.hashnode.dev/beyond-mfa-what-occurs-after-an-attacker-gains-access?utm_source=hashnode&utm_medium=feed) Discover how attackers exploit stolen sessions, malicious OAuth apps, and compromised accounts, plus ways to strengthen Microsoft 365 security. 10 min read · [hazelsec.hashnode.dev](https://hazelsec.hashnode.dev/beyond-mfa-what-occurs-after-an-attacker-gains-access?utm_source=hashnode&utm_medium=feed) [Cyber Knight](https://hashnode.com/@cyberknight2479) · [Nov 3](https://hashnode.com/posts/the-ai-agent-didn-t-break-the-product-it-walked-into-the-sales-tool/6ae986f0ba55e52190a388af) ### [The AI Agent Didn't Break the Product. It Walked Into the Sales Tool.](https://nulltrace.hashnode.dev/the-ai-agent-didn-t-break-the-product-it-walked-into-the-sales-tool?utm_source=hashnode&utm_medium=feed) WorkOS builds the login layer for thousands of companies. The breach it disclosed on 2 November didn't touch that product — it reached an internal sales app instead, and what that app held is exactly what makes the next phishing email believable. 5 min read · [nulltrace.hashnode.dev](https://nulltrace.hashnode.dev/the-ai-agent-didn-t-break-the-product-it-walked-into-the-sales-tool?utm_source=hashnode&utm_medium=feed) [Zero Trust Threads](https://hashnode.com/@zerotrustthreads) · [Oct 26](https://hashnode.com/posts/least-privilege-cybersecurity-beginners/6adf69cac3a36c3dd51bfeb8) ### [Least Privilege Sounds Simple Until You Have to Implement It](https://zerotrustthreads.hashnode.dev/least-privilege-cybersecurity-beginners?utm_source=hashnode&utm_medium=feed) Learn what least privilege really means, why privilege creep happens, and how access reviews, roles, and temporary elevation reduce risk. 6 min read · [zerotrustthreads.hashnode.dev](https://zerotrustthreads.hashnode.dev/least-privilege-cybersecurity-beginners?utm_source=hashnode&utm_medium=feed) [Zero Trust Threads](https://hashnode.com/@zerotrustthreads) · [Oct 26](https://hashnode.com/posts/service-accounts-cybersecurity-beginners/6adf69242e5434553203b573) ### [Service Accounts: The Accounts Nobody Notices Until Something Breaks](https://zerotrustthreads.hashnode.dev/service-accounts-cybersecurity-beginners?utm_source=hashnode&utm_medium=feed) Learn what service accounts are, why non-human identities matter, and how ownership, credentials, monitoring, and least privilege reduce risk. 5 min read · [zerotrustthreads.hashnode.dev](https://zerotrustthreads.hashnode.dev/service-accounts-cybersecurity-beginners?utm_source=hashnode&utm_medium=feed) [Hazel Chirinda](https://hashnode.com/@hazelchirinda) · [Oct 23](https://hashnode.com/posts/when-a-password-is-not-enough-understanding-identity-based-attacks/6adaff45c9c55d881af43e56) ### [When a Password Is Not Enough: Understanding Identity-Based Attacks](https://hazelsec.hashnode.dev/when-a-password-is-not-enough-understanding-identity-based-attacks?utm_source=hashnode&utm_medium=feed) Learn how identity-based attacks compromise Microsoft 365 accounts and how MFA, Conditional Access, and monitoring help strengthen security 11 min read · [hazelsec.hashnode.dev](https://hazelsec.hashnode.dev/when-a-password-is-not-enough-understanding-identity-based-attacks?utm_source=hashnode&utm_medium=feed) [Zero Trust Threads](https://hashnode.com/@zerotrustthreads) · [Oct 9](https://hashnode.com/posts/temporary-access-becomes-permanent/6ac90e9b6941786c42e8ef77) ### [Temporary Access Has a Way of Becoming Permanent](https://zerotrustthreads.hashnode.dev/temporary-access-becomes-permanent?utm_source=hashnode&utm_medium=feed) Temporary admin rights, firewall rules, vendor accounts, and exceptions can quietly become permanent. Learn why access needs owners and expiration. 8 min read · [zerotrustthreads.hashnode.dev](https://zerotrustthreads.hashnode.dev/temporary-access-becomes-permanent?utm_source=hashnode&utm_medium=feed) [Adeshina Emmanuel](https://hashnode.com/@emmanueladeshina01) · [Sep 13](https://hashnode.com/posts/how-aws-actually-evaluates-iam-policies-identity-vs-resource/6aa6ab4a28c6fb8953d4bf60) ### [How AWS Actually Evaluates IAM Policies (Identity vs Resource)](https://eadeshina.hashnode.dev/how-aws-actually-evaluates-iam-policies-identity-vs-resource?utm_source=hashnode&utm_medium=feed) How AWS evaluates IAM policies: implicit deny, explicit deny priority, and the union of identity-based and resource-based policies in the same account 7 min read · [eadeshina.hashnode.dev](https://eadeshina.hashnode.dev/how-aws-actually-evaluates-iam-policies-identity-vs-resource?utm_source=hashnode&utm_medium=feed) [Yury Butuzov](https://hashnode.com/@yurybut) · [Sep 10](https://hashnode.com/posts/the-anatomy-of-exposure-why-the-market-cannot-agree-on-what-counts-as-one/6adddd894ec8d18444151f9c) ### [The Anatomy of Exposure: Why the Market Cannot Agree on What Counts as One](https://yurybutuzov.hashnode.dev/the-anatomy-of-exposure-why-the-market-cannot-agree-on-what-counts-as-one?utm_source=hashnode&utm_medium=feed) Two exposure-management tools can examine the same environment and return very different numbers. That does not necessarily mean that either is wrong. 10 min read · [yurybutuzov.hashnode.dev](https://yurybutuzov.hashnode.dev/the-anatomy-of-exposure-why-the-market-cannot-agree-on-what-counts-as-one?utm_source=hashnode&utm_medium=feed) [Tushar Openiam](https://hashnode.com/@tusharop) · [Sep 10](https://hashnode.com/posts/the-access-review-your-auditor-cannot-rely-on/6aa2b29a229ba2809fe90752) ### [The Access Review Your Auditor Cannot Rely On](https://openiam.hashnode.dev/the-access-review-your-auditor-cannot-rely-on?utm_source=hashnode&utm_medium=feed) Discover why 100% access review completion still leads to audit findings. Learn how to transform rubber-stamp certifications into audit-ready evidence 7 min read · [openiam.hashnode.dev](https://openiam.hashnode.dev/the-access-review-your-auditor-cannot-rely-on?utm_source=hashnode&utm_medium=feed)