InfoSec, tweeting and tooting when time allows. Dipping toes in mastodon at [email protected] - Founding (former) editor of SRSLY RISKY BIZ newsletter.
Perth, Western Australia
Joined February 2009
- Tweets8.5K
- Following3.5K
- Followers5.2K
- Likes4.5K
Brett Winterford retweeted
Today we’re announcing the General Availability of Agent SSO, and we’re including it in our core SSO offering.
SSO transformed how people move across applications, making access seamless for users and centralizing identity and control for IT. AI agents need the same thing.
Today, connecting agents is a mess of static API keys, fragmented integrations, and endless user consent prompts. But Agent SSO changes that. Powered by the open Cross App Access (XAA) standard, it enables agents to be registered as first-class identities. For IT, it means centralized visibility and least-privilege policy. For users, it means their AI agents can seamlessly connect across enterprise apps without interrupting their flow.
Brett Winterford retweeted
Okta has signed a definitive agreement to acquire @permisosecurity! We’re excited to bring together the best identity threat detection, posture management, and runtime protection offerings to help organizations gain deeper visibility, reduce risk, and securely adopt AI at scale. bit.ly/45ySR0E
Brett Winterford retweeted
Come work with us @okta ! We're looking for a new member of Okta's Threat Intelligence team. This role is one in which if you have a good idea that fits our mission, you can run with it. Plus, we're nice people. 😀 North Korean IT workers need not apply. linkedin.com/jobs/view/44106…
Brett Winterford retweeted
Over several weeks, @okta tested OpenClaw with various AI models to see how agents handle API keys, OAuth tokens and credentials. Agents can't be trusted, and it's easy to talk them into skirting their guardrails. Don't let agents see secrets! More here: okta.com/newsroom/articles/w…
Brett Winterford retweeted
Anyone reusing credentials on their Fortinet device? Asking for a friend on AS17511 (219.75.254[.]166) who keeps failing to get their password right.
Brett Winterford retweeted
We analyzed over 300,000 rows of the January 2026 BreachForums database leak to find their users' anonymizers of choice.
Join us in the cantina. 🧵
Brett Winterford retweeted
I recently joined @reckless on @DecoderPod to discuss the “SaaSpocalypse,” the future of software, and why the identity layer for AI agents could become the biggest category in cyber. Really enjoyed this conversation: bit.ly/481Tema
Brett Winterford retweeted
A browser extension promised security. In reality, it was a Trojan horse for your crypto.
We tracked the extension, mapped the infrastructure and pulled the plug.
Full breakdown of the takedown: bit.ly/40E9i9N
Brett Winterford retweeted
Your star hire might be a DPRK agent. 🇰🇵 @Okta reveals how state actors use stolen LinkedIn IDs, AI-generated faces, and forged git commits to bypass HR. Verify identities before they're on your payroll! #opentowork bit.ly/4quh8go
ALT AI-generated image of a post from a North Korean state actor
Brett Winterford retweeted
Google disrupted IPIDEA, a major residential proxy network. Our data confirms a sharp drop in their active IPs following the action. 📉
Protect your Okta org today: block IPIDEA and residential proxies with dynamic network zones bit.ly/3OiZVJz
Brett Winterford retweeted
Still tracking the bad packets, now powered by Okta log data! Top ASNs used in recent signup fraud attacks:
• 212238
• 16276
• 44477
• 26548
• 200373
• 137409
• 214483
• 13213
• 397368
Brett Winterford retweeted
Cross App Access (XAA) is now the #MCP authorization extension: ‘Enterprise-Managed Authorization’.
Proud @okta played a role in establishing this new protocol to secure AI. bit.ly/3Knjzm8
Brett Winterford retweeted
Troy Iwata got hired for Trump's cabinet, but @jordanklepper wasn't?
Brett Winterford retweeted
We’ve introduced passkeys as a simple and secure option for people to sign in to their myGov account.
Your account will be most secure when you create a passkey and turn off your password as a sign in option.
To find out more watch this video, or visit: my.gov.au/passkeys
Expect social engineers to exploit the Falcon issue. crowdstrike.com/blog/falcon-…
Brett Winterford retweeted
Check out our very own CPO, @clcsampaio, being interviewed on @riskybusiness about Identity and Fine Grained Authorization!
🎧 Listen to the full episode here: bit.ly/4bQezhQ
ALT Photo of Okta's Cassio Sampaio. Text reads, "Interviewed onRisky Business Podcast"
Brett Winterford retweeted
back in my day we called this spyware
ALT New Windows AI feature records everything you’ve done on your PC Recall uses AI features "to take images of your active screen every few seconds."
Messing with gaming companies is a cyber-stormtrooping worthy event
abc.net.au/news/2024-05-02/c…
Now bringing new, confused audiences to the @riskybusiness podcast!
New podcast dropping soon! I'm super excited to announce that I'm launching a show called Risky Business. Cohosted by me and Maria Konnikova (@mkonnikova). First episode is May 16. You can learn more here: natesilver.net/p/announcing-…
