Industry Insight

Four days before the second inauguration of President Donald Trump, his predecessor President Joe Biden issued an executive order that aimed to create a national cybersecurity strategy across federal agencies, private businesses, and critical infrastructure sectors. While President Trump has been quick to roll back other executive orders in his…

Non-human identities (NHI), including machine identities, service accounts, API keys, and automation tools, play a critical role in modern cloud environments and enterprise applications. Yet, the proliferation of secrets—like hardcoded credentials, tokens, and certificates—introduces security risks that can be exploited if not properly managed. As…

Research by Okta Security found that organizations targeted by prolific threat actors almost always enroll their users in phishing-resistant methods of sign-in. Given the low cost and complexity of moving users to stronger authenticators, why wait to be targeted? Okta research has found that while the rate of growth in MFA adoption is slowing, the…

In a year of transition, it's crucial that the government and its partners are focused on what’s next and what’s mission-critical to ensure the right outcomes for their stakeholders, both inside and outside the government. The Okta Gov Identity Summit, hosted on March 5, 2025, will continue the important conversation around “Identity is security.”…

Today, the White House released its Executive Order on Strengthening and Promoting Innovation in the Nation’s Cybersecurity. In an era defined by rapid technological advancements, the executive order aims to strengthen and promote innovation in cybersecurity while promoting the safety and resilience of the digital tools agencies rely on. We are…

A new year is here, and with it come new resolutions, possibilities, and — regrettably — threats.  No, threat actors won’t just change their ways with the flip of the calendar. Instead, they’ll double down on what’s been working and experiment with new ways of evading detection and exploiting vulnerabilities.  While we can’t anticipate every…

An open door for attacks Identity-based attacks are a rising threat, and every organization is responsible for protecting itself. What do we mean? Just as you have a door and a lock at home, Identity security protects your cloud and SaaS assets: It’s the external perimeter of your organization’s assets. Identity security means controlling who…

Last updated on February 12, 2025 Here’s the third blog in our series detailing how focusing on Identity can help your organization improve end-user experiences and meet consumer expectations. On its third anniversary, we look back at the Executive Order on Transforming Federal Customer Experience (CX) and Service Delivery to Rebuild Trust in…

In this guest post, Thoughtworks’ CISO Nitin Raina and Head of Security Architecture Nazneen Rupawalla share their outlook on the security landscape for 2025, including emerging risks and fresh approaches to confronting them. As security leaders, we’re always monitoring for new threats looming just over the horizon. To protect our business and our…

As champions of product innovation and customer experience, chief product officers, directors, and strategists play a strategic role in delivering products that make it easy for customers to solve their everyday challenges. However, competition in the SaaS industry is fierce. Unique features serve as competitive differentiators, but customers and…