FusionAuth

FusionAuth

@fusionauth.io

The only Customer Identity and Access Management (CIAM) with hybrid, single-tenant deployment you can dev and test anywhere

186 followers4 following133 posts

FusionAuth
@fusionauth.io

Ever tried explaining an account takeover to someone like they're five years old? Check out our new coloring book for product & marketing teams, that explains FusionAuth’s intelligent MFA. It’s like having a digital watchdog that never sleeps. Download the PDF: fusionauth.io/ebooks/mfa-c...

fusionauth.ioSignal the Auth Hound: The Intelligent MFA Coloring Book Ebook - FusionAuthMeet Signal the Auth Hound and explore 10 CIAM risk signals in a playful Intelligent MFA coloring book built for security teams, developers, and identity pros.
FusionAuth
@fusionauth.io

Excited to have our talented engineers at #AGNTCon + #MCPCon in San Jose this week. If you’re attending, let’s connect and talk about machine identity architecture. Drop a comment or DM us! #MachineIdentity #Innovation #Networking

events.linuxfoundation.orgAGNTCon + MCPCon: The AI Agents & MCP ConferenceThe AI agents conference — AGNTCon + MCPCon North America, Oct 22–23, 2026, San Jose. Agentic AI infrastructure, production agent systems, and MCP. Formerly MCP Dev Summit.
FusionAuth
@fusionauth.io

Where your identity data lives matters. Editorialge’s guide ranks FusionAuth as the top choice for self-hosted authentication. You can run it on private infrastructure or our managed hosting, plus migration tools ease the transition from other identity databases. editorialge.com/best-authent...

editorialge.com9 Best Authentication Solutions for SaaS AppsCompare 9 of the best authentication solutions for SaaS apps, including Auth0, Clerk, WorkOS, Stytch, Supabase, Firebase, Cognito, and FusionAuth.
FusionAuth
@fusionauth.io

Tomorrow, join @mooreds.com as he dives into the impact of placing an authorization server between Claude Desktop and your MCP server. Learn about user login enforcement and scope-based consent for AI actions on your APIs with the Ruby SDK. Secure your spot: luma.com/7y5n7ubf

luma.comBoulder Ruby October 2026 Presentation Night · LumaJoin us at our monthly gathering where we present topics of interest to Rubyists and aspiring programmers. Doors open at 6:00pm, where you can hangout and…
FusionAuth
@fusionauth.io

As AI transforms customer interactions, buyers are keen to know where their identity data is stored and who controls it. We're launching our first UK sales team to meet this demand! Read more insights about this from our CEO Brian Bell in The AI Journal: aijourn.com/as-ai-raises...

FusionAuth
@fusionauth.io

Hooking Claude Desktop to your database via MCP is exciting, but be cautious about unauthenticated access! Join @mooreds.com next week at Boulder Ruby October to learn how to secure your MCP server, connect it to Claude Desktop, and implement user logins. luma.com/7y5n7ubf #BoulderRuby

luma.comBoulder Ruby October 2026 Presentation Night · LumaJoin us at our monthly gathering where we present topics of interest to Rubyists and aspiring programmers. Doors open at 6:00pm, where you can hangout and…
FusionAuth
@fusionauth.io

European buyers chose FusionAuth even before we had a team in the region, surging ARR by 72%. With our first UK sales team in place, we're ready to meet the demand for greater control over identity and data. Full read at: www.itsecurityguru.org/2026/10/06/t...

itsecurityguru.orgTenant isolation becomes a buying criterion as FusionAuth opens UK officeCustomer identity and access management (CIAM) provider FusionAuth has established its first dedicated European sales team, based in the UK, as enterprises acro
FusionAuth
@fusionauth.io

In case you missed it, here are a few highlights from our Smart Guide to Implementing Risk-Based MFA (That Customers Won’t Hate). Learn how to boost security without annoying your customers. Perfect for teams in security, identity, and product. Get the full eBook at fusionauth.io/ebooks/risk-...

FusionAuth
@fusionauth.io

Most identity rankings emphasize fast login widget integration, but what about the long-term MAU costs? Cybersecurity News named FusionAuth the "Best Self-Host Control" in their 2026 AaaS report. Read more at cybersecuritynews.com/best-authent...

cybersecuritynews.comTop 10 Best Authentication-as-a-Service (AaaS) Providers in 2026 [Ranked & Scored]Outsource login, keep control. We ranked 2026’s 10 best AaaS providers — Auth0 leads, Entra and Firebase podium — with scores, free tiers, and MAU math.
FusionAuth
@fusionauth.io

Why do we treat dedicated fans like strangers? For 20 years, sports tech has relied on isolated systems, causing friction for fans. FusionAuth CEO Brian Bell discusses the future of fan identity at Leaders Week London.

FusionAuth
@fusionauth.io

Caching helps with product page spikes but doesn’t support authentication, which is more CPU-intensive. If your identity provider isn’t load-tested for peak traffic, it could halt your checkout flow. Benchmark your identity stack before traffic hits: fusionauth.io/blog/black-f...

fusionauth.ioCan Your Identity Platform Pass the Black Friday Test?Vendor demos show you an identity platform working under ideal conditions. Retailers need to know where it breaks — at peak traffic, at scale, and against legacy systems.
FusionAuth
@fusionauth.io

A forgotten federated login can make your account an easy target. This was the case for 5,000 Dropbox users, where a Lenovo ID flaw let attackers access accounts without passwords. @mooreds.com stresses the importance of verifying new login methods. Read more: hackread.com/hackers-acce...

hackread.comHackers Accessed 5,000 Dropbox Accounts Through Lenovo ID FlawA Lenovo ID email verification flaw let attackers access about 5,000 Dropbox accounts without using the victims’ Dropbox passwords.
FusionAuth
@fusionauth.io

Proud to be featured in the Cyber Press 2026 CIAM buyer's guide! 🎉 Our CIAM solution is flexible—choose between self-hosted or cloud-based with transparent pricing from day one. Discover why unlimited-user self-hosting is a game changer! Read the full guide here: cyberpress.org/ciam-solutio...

cyberpress.org8 Customer Identity & Access Management (CIAM) Solutions: Our Top Picks by Use Case (2026)Choosing customer identity? Our CIAM guide maps 8 picks — Auth0 for developers, Ping for scale, Stytch for fraud-aware flows — to your product and industry.
FusionAuth
@fusionauth.io

Most breaches are transactional, but a data catalog breach? That's a whole different game. If compromised, attackers gain a complete view of your enterprise. Credential rotation doesn't work. Discover the fresh approach for catalog remediation: www.cybersecurity-insiders.com/why-a-data-c...

cybersecurity-insiders.comWhy a Data Catalog Breach Is Different — And Why You Can't Just Rotate Your Way Out of ItAlation disclosed a breach; catalog metadata can map sensitive fields, data flows and service accounts, guiding attacks for years to come.
FusionAuth
@fusionauth.io

LLMjacking an emerging AI threat, stealing access to your paid models and running up bills. Dan Moore (FusionAuth) likens it to cryptojacking. Protect yourself with scoped credentials & least privilege. 💻🔒 Read more: www.itbrew.com/stories/what... #LLMjacking #Cybersecurity #Identity #AISecurity

itbrew.comWhat is LLMjacking, and why should IT pros care?As anybody who follows cybersecurity knows, when a new technology emerges, it’s usually followed by a threat actor trying to -jack it up. There’s clickjacking (tricking someone into hitting a disguised URL), sessionjacking (stealing a token to impersonate a user and gain their web access), and DNSjacking (redirecting someone to an attacker-controlled destination). And now, with attackers trying to take over large language models, we have…LLMjacking.
FusionAuth
@fusionauth.io

In just 23 days, AWS's agent tools faced four CVEs due to a common security issue: giving models too much decision-making power. Our 2026 AI Identity Report shows 66% of organizations experienced an AI identity breach, but only 28% can link actions back to a human. tech.yahoo.com/cybersecurit...

tech.yahoo.comAWS Strands Agents Tools Received Four CVEs in 23 Days — And They All Share the Same Root CauseBetween July 15 and August 6, 2026, AWS Strands Agents Tools — the first-party tool package for the Strands Agents SDK — received four distinct security advisories. The vulnerabilities range from credential disclosure to arbitrary command execution, but they share a singular root cause: security-sensitive parameters were exposed as LLM-controllable inputs in the tool schema. […]
FusionAuth
@fusionauth.io

When engineers ignore the AI tools you've invested in, it’s not just a matter of adoption, it’s a procurement issue. Dan Moore points out that if you can’t pinpoint the problem your tool solves, measure its impact, and show improvements, you're just following trends. leaddev.com/ai/you-bough...

FusionAuth
@fusionauth.io

Attackers are targeting US water systems by exploiting long-standing weaknesses, not AI. Essential defenses like patching, limiting internet exposure, strong access controls, and proper authentication are vital. Check out Dan Moore's insights in Route Fifty: www.route-fifty.com/cybersecurit...

route-fifty.comStates, feds scramble to prevent more water cyberattacksIn the weeks after nine states were hit, lawmakers at the federal and state levels have proposed new funding to harden infrastructure, but experts warned they remain vulnerable.
FusionAuth
@fusionauth.io

A translation plugin on 400,000 WordPress sites exposed admin password-reset links via a public API. Two seemingly harmless features combined, allowing attackers access to admin accounts. Check out Dan Moore's insights on the TranslatePress flaw: itnerd.blog/2026/08/27/4...

itnerd.blog400,000 WordPress Sites Impacted by Account Takeover Vuln in TranslatePress PluginResearchers have uncovered a critical vulnerability with a CVSS score of 9.8 in the TranslatePress WordPress plugin, with 400,000 active installations, that could allow unauthenticated attackers to…
FusionAuth
@fusionauth.io

A rogue app hits a wall and stops. An AI agent? It finds a way around it. Dave Hayes, VP of Product, dives into the shift in shadow AI: unsanctioned apps connect to one system, while agents connect to many, pushing past obstacles. Read more from Tech News Vision: technewsvision.co.uk/invisible-ai...

technewsvision.co.ukInvisible AI Agents Creating New Enterprise Security Risks | Tech News VisionLurking in many business environments are AI agents that pose serious security risks but, for the most part, remain out of sight of security teams, according
FusionAuth
@fusionauth.io

Valid provenance can still lead to malware. In the AsyncAPI attack, attackers exploited trusted pipelines to deliver backdoored packages. @mooreds.com from FusionAuth explains that malicious code activates upon library import, not installation. Read more: www.reversinglabs.com/blog/why-sof...

reversinglabs.comWhy software delivery cannot depend on trust alone | RL BlogAttackers turned the trusted AsyncAPI CI/CD publishing pipeline against its users, and the provenance checks all came back clean.
FusionAuth
@fusionauth.io

You wouldn’t hand a contractor a master key, so why let AI agents access your infrastructure without oversight? Join Dan Moore on the Security Strategist Podcast to discover why unique identities for AI agents are vital for security. Listen: em360tech.com/podcasts/why...

FusionAuth
@fusionauth.io

Attackers are logging in, not breaking through firewalls. Ensure AI agents use short-lived identity rules to prevent insider threats. Service accounts aren’t enough—opt for scoped tokens! Check out this report by TechnologyAdvice, sponsored by FusionAuth: fusionauth.io/ebooks/insid...

FusionAuth
@fusionauth.io

Fake accounts are exploiting free credits to resell cheap AI tokens. To combat this, decouple credits from signup. Insights from Dave Hayes, VP of Product at FusionAuth: itnerd.blog/2026/08/08/p...

itnerd.blogPoison Claude Selling Discounted AI Tokens Built on Fake Accounts and Free CreditsResearchers have found online service Poison Claude reselling access to Anthropic’s premium AI models at a significant discount with suspicions that these discounts are coming from fraudulently reg…
FusionAuth
@fusionauth.io

Black Hat 2026 felt like #CES! While vendors splurged on flashy booths, the truth remains: attackers are logging in, not breaking in. We focused on real identity infrastructure with our '90s-themed booth instead of gimmicks. Let's chat auth—DM us for a fluff-free sync! #BlackHat2026

FusionAuth
@fusionauth.io

Two-thirds of breaches stem from login issues, highlighting the importance of identity management. In Episode 127 of the SourceForge Podcast, we discuss how in-house customer auth can pose silent security risks. Full episode: www.youtube.com/watch

FusionAuth
@fusionauth.io

Ever feel like your auth setup is a ticking time bomb? 💣 Join us at Black Hat Booth #5642, Aug 4–6, Mandalay Bay, Vegas! FusionAuth gives you control with a CIAM platform that's self-hosted or cloud-based. No surprises! fusionauth.io/event/blackh... #BHUSA #CIAM #AppSec #FusionAuth #Auth