🚨 SDO releases the 2026 State of Identity Security in Financial Organizations report. Here's the uncomfortable finding: 82% of financial organizations say they're confident they can stop account takeover, while only 28% of their workforce's MFA is actually phishing-resistant. That's not confidence. That's a blind spot. We surveyed 200 IAM leaders across US and Canadian banks, credit unions, and investment firms. Teams feel protected while their own answers say otherwise. That gap between perception and posture is the real finding. 94% saw phishing rise this year. Legacy systems sit at just 50% MFA coverage. And only 15% of workforce authentication is truly passwordless, because "passwordless" often hides the password instead of removing it. Confidence should be earned by coverage, not assumed in spite of it. Read the full announcement here: hubs.ly/Q04r-c4P0 #IdentitySecurity #Passwordless #PhishingResistant #MFA #FinancialServices #ZeroTrust

Uber has open-sourced its agentic AI security stack, along with the first enterprise benchmark for agentic AI attacks. The finding is worth noting: hundreds of credential exposures across 26 categories in 10+ months of production, from their own employees' agent sessions. Prompt injection was rarer. Agents need credentials to act. That's the exposure. Read the post here: linkedin.com/posts/pneppalli… #AIsecurity #AgenticAI #IdentitySecurity #Passwordless

🔐 If you’re heading to #rightofboom, identity is probably already on your prevention checklist. One of the biggest ways phishing still turns into real incidents is simple: stolen credentials. Passwords and MFA fatigue make it easier for attackers to get in, and when access is compromised, your clients feel the impact first. We’ll be at Booth #3 to share practical ways MSPs can move toward phishing-resistant, passwordless authentication and reduce credential exposure as part of a stronger Zero Trust approach. 📍 Las Vegas, NV | Booth #3 🗓️ February 3–6 Learn more: hubs.ly/Q03-pNN-0

Financial services are one of the most highly regulated industries, and authentication standards keep rising. 🔐 This brief guide explains why financial organizations are modernizing MFA and how to transition to phishing-resistant access without a lengthy multi-year identity overhaul. Download the guide here: hubs.ly/Q03-0pVB0

🎄 Season’s Greetings from Secret Double Octopus 🐙 For 2026, our wish is straightforward: no workforce passwords anywhere across an organization’s infrastructure — hybrid, on-prem, cloud-based apps, legacy, and everything in between. Thank you to our customers and partners for trusting us to protect what matters most. Here’s to a safer, password-free future. ✨ Happy Holidays! ✨

Heading to Gartner® IAM Summit? Stop by Booth #707 to see how to go truly passwordless — across cloud, VPN, on-prem & legacy — without re-architecting. 📍 Dec 8–10 | Grapevine, TX 🔗 Book a meeting: hubs.ly/Q03SYRcl0

🛡️ When Legacy Becomes Your Weakest Link The Oracle breach in April highlights a familiar enterprise risk: legacy systems still dependent on passwords. Many organizations delay modernizing legacy authentication, assuming it poses little risk, yet attackers routinely exploit these outdated credentials to move laterally and escalate privileges. Our latest blog demonstrates how phishing-resistant, passwordless authentication closes these gaps and brings modern security to every system, requiring no infrastructure changes. 🔗 Read the blog: hubs.ly/Q03NdGgD0

Nearly 80% of breaches still trace back to passwords. The answer is modern authentication 🔐 stronger, simpler, phishing resistant. Read our strategic guide to modern authentication and learn how to: ✅ Secure legacy and on-prem systems without costly overhauls ✅ Guarantee compliance with phishing-resistant MFA ✅ Deliver measurable ROI through productivity, IT savings, and reduced breach exposure Make authentication your strongest defense 🚀 Download the guide 👉 hubs.ly/Q03GR-qw0

This practical guide offers a step-by-step playbook for scaling phishing-resistant, passwordless MFA that works with what you already have. Learn how to: ✔ Deploy true passwordless enterprise-wide ✔ Scale FIDO and Windows Hello ✔ Strengthen security and simplify IT Get the guide → hubs.ly/Q03zzdYB0

🔐 Why does traditional MFA still leave your enterprise exposed? Legacy and on-prem apps weren’t built for modern authentication, and layering MFA on top doesn’t close the real gaps. These systems often remain the weakest link in your security posture. Modern authentication should work everywhere, not only for cloud apps. Octopus provides phishing-resistant, passwordless access throughout your entire enterprise, including legacy and on-prem systems, without requiring any redesign. Learn more at: hubs.ly/Q03xCn9p0

What if you could use Windows Hello for Business everywhere, across your entire enterprise, including legacy and on-prem systems? In this expert piece, SDO CEO Raz Rafaeli shows how to extend phishing-resistant, passwordless authentication far beyond Windows desktops, closing the critical gaps WHfB leaves behind. 👉 Read more: Halfway Security Is No Security hubs.ly/Q03tyvdF0

Using single sign-on but still typing passwords for legacy, on-prem, or remote systems? 🤔 We’ve got news: your SSO isn’t enough. ❌ @double_octopus goes further — passwordless access to every system. 🔐 It’s time for a real solution: A single login. Zero passwords. Enterprise-wide access. 👇 Watch to be future-ready.

🔒 “What we’re doing isn’t working.” That’s how veteran CISO Selim Aissi summed it up in our recent webinar on MFA compliance in financial services. Despite MFA adoption, identity remains the #1 target in breaches. And with NYDFS tightening requirements in 2025, the pressure to modernize is real. 🧠 In this blog, we break down key insights from Selim Aissi and our identity strategist Don Shin—on why traditional MFA is falling short, and what phishing-resistant authentication really means in practice. ✅ Real-world use cases from leading banks and insurers ✅ How to secure legacy apps, VDI, and remote admin access—without ripping out your infrastructure ✅ What CISOs need to know to meet NYDFS and FFIEC expectations—without the tradeoffs 👉 Read the full recap: hubs.ly/Q03p6yFT0

❓ Think your Single Sign-On is doing its job? If you're still typing passwords for legacy, on-prem, or remote systems—it’s not. Most SSO solutions stop at SaaS, leaving gaps that slow teams down and expose your business to risk. It’s time for a real solution: A single login. Zero passwords. Enterprise-wide access. Discover how to eliminate every password and unify access across your entire environment. 📘Read the guide: hubs.ly/Q03nhm940

Passwords burden IT teams and cost law firms millions in lost productivity. Discover how a phishing-resistant, passwordless MFA can transform your firm: 🛡️ Secure legacy and cloud systems seamlessly 💰 Recover millions in billable time 🛠️ Reduce IT tickets by 40% ✅ Simplify compliance 📥 Download the guide now: hubs.ly/Q03lsMJH0

🚨 NYDFS MFA compliance is no longer optional. But not every MFA solution meets the mark — or scales. 📅 On May 7 at 11 AM EST, join us for a live session: ✅ Understand the new NYDFS MFA requirements ✅ Identify common compliance gaps ✅ Learn how to secure MFA that scales with your business 👉 hubs.ly/Q03kh7q70

Most “passwordless” solutions just hide the password. Secret Double Octopus eliminates it across the ENTIRE enterprise. From legacy systems and on-prem environments to every cloud app—no redesigns, no exceptions. The impact: ✔️Nothing to phish or steal ✔️Seamless login for every user ✔️Less burden on IT Wondering what makes us the only true ZeroPassword solution? 🎥 Watch how it works.

🚨NYDFS Deadline Approaches – Is Your MFA Compliant?🚨 The NYDFS is tightening cybersecurity rules, requiring MFA for anyone accessing systems across financial institutions and their affiliates. Compliance is due by November this year. Join this webinar to learn how to deploy a phishing-resistant MFA that: - Covers legacy, on-prem, and offline systems - Meets NYDFS requirements beyond basic MFA - Integrates with your existing infrastructure - Eliminates passwords across your enterprise 📅 When: May 7, 2025 at 11 AM EST Don’t wait until the audit. Secure your spot now: 👉 hubs.ly/Q03hrSxK0