IAM Compliance Requirements and Best Practices: From Policy to Verified Enforcement
Identity and Access Management (IAM) compliance is the practice of proving that access controls are not just documented but actively enforced across…
Tag: PAM
PamStealer macOS Malware Uses Fake Maccy Sites and PAM Checks to Steal Login Passwords
Cybersecurity researchers at Jamf Threat Labs have discovered a new macOS information stealer named PamStealer that uses sophisticated techniques to infect systems…
PamStealer: New macOS Infostealer with PAM Password Validation
PamStealer is a macOS information stealer discovered by Jamf Threat Labs that uses fake Maccy sites for distribution. It employs a two-stage…
Guardian Agents: Governing AI Identity in Enterprise Environments
AI agents are increasingly deployed in enterprise environments, inheriting permissions and executing tasks autonomously, often bypassing traditional identity governance controls. This article…
China-Linked Velvet Ant Backdoored Linux PAM and OpenSSH for Nearly a Decade
Sygnia, tracking the China-nexus group as Velvet Ant, discovered that the group backdoored Linux PAM and OpenSSH components to maintain persistent access…
PAM (Pluggable Authentication Modules): Linux Authentication Framework
PAM is a Linux authentication framework that was backdoored by Velvet Ant to allow secret password access and credential theft. The group…