KuppingerCole

Passwords and traditional authentication methods have long served as the foundation of digital identity security. However, the threat landscape is evolving rapidly. Cybercriminals are increasingly leveraging AI-powered phishing campaigns and Adversary-in-the-Middle (AiTM) attacks to bypass conventional security controls, capture credentials, and intercept one-time passcodes i...

Weaponised open-source packages, AI-generated code of uncertain provenance, and cascading dependency failures now sit alongside ransomware and credential theft as risks organisations cannot afford to manage reactively. The question is no longer whether to invest in software supply chain security. It is whether your current programme, and your current vendor choices, are built...

There is no cybersecurity without AI anymore. For Michael Schrank is a security leader who has built and led teams at Deutsche Bank, Daimler, and Adidas, that shift cuts both ways: attackers are moving faster because of AI, and defenders have no choice but to match that pace.

Berthold Kerl speaks with Michael about what a genuine AI-driven shift in security looks like ...

There are two ways a state can make a digital identity trustworthy. It can center trust on certifying market providers against a published standard. Or it can center trust on a credential the state issues itself, and specify the architecture.

The United Kingdom (UK) and the European Union (EU) each picked one. For most of the last decade the difference looked like a ma...

I was part of a pilot for Immigration, Refugees and Citizenship Canada with a simple requirement: a digital work permit still had to be verifiable after it was printed.

Our first approach placed an entire W3C Verifiable Credential inside a QR code. Cryptographically, it was attractive. Physically, it was not. The code was difficult to print reliably and difficult for o...