FusionAuth

A customer wants to connect their identity provider. Why should that trigger another bill? That was one of the questions Betty Blocks had when evaluating authentication platforms. As its low-code platform grew, supporting enterprise identity requirements was simply part of doing business. Betty Blocks didn’t want an authentication model where ordinary capabilities became expensive add-ons. That’s why they chose a different approach. Today, FusionAuth supports authentication across 10,000+ Betty Blocks applications without turning every new identity requirement into another pricing conversation. Read the story: link in first comment. #CIAM #CustomerIdentity

Release 1.69.0 https://lnkd.in/eJBCr-Sb

AI didn't create the identity problem. It removed the speed limit https://lnkd.in/ewtKRkhk

A breached data catalog hands attackers the blueprint for everything else they'll steal. Alation confirmed a cyberattack this week. Dan Moore, Sr. Director, CIAM Strategy & Identity Standards at FusionAuth, explains why a data catalog breach is so hard to recover from: you can't rotate a token to undo it, and attackers keep the knowledge of how your data is classified and who can reach it for years. Dan Moore, Sr. Director, CIAM Strategy & Identity Standards at FusionAuth, shares his perspective in The IT Nerd: https://lnkd.in/ei3dNH4w #Cybersecurity #Identity #DataBreach #CIAM

Valid provenance vouched for the malware. That's the problem. In the AsyncAPI supply chain attack, the attacker rode the project's own trusted pipeline to build, sign, and publish backdoored packages. Every attestation came back clean. Dan Moore, Sr. Director of CIAM Strategy at FusionAuth, explains in ReversingLabs why the standard advice misses it: the attestation was real, and the malicious code runs when you import the library, not when it installs. https://lnkd.in/edvP28j6 #SoftwareSupplyChain #DevSecOps #Cybersecurity #Identity

10,000+ applications is impressive. But the more interesting part is what didn’t happen as Betty Blocks grew. Authentication didn’t become a sprawling mess of infrastructure, integrations and workarounds. Betty Blocks needed an identity platform that could scale alongside its low-code platform without making every new application more complicated to support. Today, more than 10,000 applications use FusionAuth, some serving thousands of users each. That’s what good infrastructure looks like: growth without the growing pains. Read the Betty Blocks story- link in first comment. #CIAM #CustomerIdentity

AI adoption doubled year on year, but 68% of teams have zero clear metrics for the impact. AI tool cost concerns jumped from 35% to 62%, and 42% of teams say engineers are losing the ability to debug without AI tools. Last chance to join Dan Moore (FusionAuth), Tiffany Jachja (Yahoo), and Jerome Hardaway (Vets Who Code) on tomorrow's LeadDev panel breaking down the AI Impact Report 2026. Details and registration: https://lnkd.in/edDEFJjC

You wouldn't hand a temporary contractor a master skeleton key. Yet, engineering teams routinely hand autonomous AI agents a shared service account to chain API calls across their infrastructure. Autonomous AI agents are changing the security perimeter. Attackers are not breaking in anymore. They are logging in. On the Security Strategist Podcast, Dan Moore and Trisha Pillay explain why agents need distinct identities and how adaptive authentication improves security. Listen to the breakdown of how to build trust in autonomous systems: https://lnkd.in/erexfC5q

Attackers aren't breaking through firewalls anymore; they're logging in. When granting an AI agent permission to chain API calls across internal services, ensure it has short-lived identity rules. Without this, a single prompt injection can turn it into an insider threat. Service accounts and hardcoded secrets are insufficient for agentic workflows. Use short-lived scoped tokens and clear identity boundaries. This report from TechnologyAdvice, sponsored by FusionAuth, details changes CISOs are making. Get it here: https://lnkd.in/ehnkNzGE

The fake accounts signed up, cleared the check, and spent the credits they were handed, exactly what they were authorized to do. "Poison Claude" resells those free credits as cheap AI tokens, and it's hard to shut down because there's no break-in to chase. The only fix is upstream: stop tying credits to signup, and make releasing them a separate decision sized to what's at stake. Dave Hayes, VP of Product at FusionAuth, shares his perspective in The IT Nerd: https://lnkd.in/evHkJf26