Hummingbird Security Blog https://gethumming.io/blog/ Expert insights on identity threat detection and response (ITDR), AI-powered security, lateral movement prevention, OAuth token security, and post-authentication threat detection. en-us Wed, 04 Mar 2026 23:08:46 GMT hello@gethumming.io (Hummingbird Security) hello@gethumming.io (Hummingbird Security) https://gethumming.io/images/icons/hummingbird-icon.svg Hummingbird Security Blog https://gethumming.io/blog/ Introducing Auth Sentry Monitor: Free Identity Visibility for Every Organization https://gethumming.io/blog/auth-sentry-monitor-launch/ https://gethumming.io/blog/auth-sentry-monitor-launch/ Wed, 04 Mar 2026 00:00:00 GMT Today we're launching Auth Sentry Monitor — a free tier that gives every organization instant visibility into their identity security posture, with a 7-day trial of full threat detection capabilities. hello@gethumming.io (Hummingbird Security) Product Launch Identity Security Auth Sentry Threat Bulletin: Iranian APT Groups Targeting Cloud Identity Infrastructure https://gethumming.io/blog/iranian-apt-threat-bulletin/ https://gethumming.io/blog/iranian-apt-threat-bulletin/ Wed, 04 Mar 2026 00:00:00 GMT Iranian state-sponsored hackers are escalating attacks on cloud identity systems. Auth Sentry has deployed 11 detection rules tuned specifically for APT33, APT34, APT35/Charming Kitten, and MuddyWater tradecraft targeting Okta, Microsoft 365, and Google Workspace. hello@gethumming.io (Auth Sentry) Threat Bulletin Threat Intelligence Identity Security SLSH Vishing Attacks: Your Login Looked Fine. That's the Point. https://gethumming.io/blog/slsh-vishing-attacks-mfa-bypass/ https://gethumming.io/blog/slsh-vishing-attacks-mfa-bypass/ Sat, 21 Feb 2026 00:00:00 GMT How SLSH (Scattered Spider, LAPSUS$, ShinyHunters) bypasses Okta MFA with real-time voice phishing. Attack chain analysis, detection signals, and ITDR defense strategies. hello@gethumming.io (Hummingbird Security) Threat Analysis ITDR Vishing Scattered Spider Why Graph Intelligence Is Your Best Defense Against Identity-Based Attacks https://gethumming.io/blog/graph-intelligence-defense-identity-attacks/ https://gethumming.io/blog/graph-intelligence-defense-identity-attacks/ Fri, 20 Feb 2026 00:00:00 GMT Why combining graph-based detection, behavioral analytics, and traditional rules is the only sustainable defense against identity-based attacks like Scattered Spider. A technical guide for security teams. hello@gethumming.io (Hummingbird Security) Identity Security Graph Intelligence Scattered Spider ITDR Why Your Identity Security Tool Generates 847 Alerts and Zero Answers https://gethumming.io/blog/847-alerts-zero-answers/ https://gethumming.io/blog/847-alerts-zero-answers/ Fri, 13 Feb 2026 00:00:00 GMT Identity security tools generate 847+ alerts daily but miss real threats. Learn why alert-based ITDR fails and how investigation-first detection prevents credential-based breaches. hello@gethumming.io (Hummingbird Security) ITDR Identity Security SOC Operations Alert Fatigue The ITDR Buyer's Guide: What to Look For, What to Avoid https://gethumming.io/blog/itdr-buyers-guide/ https://gethumming.io/blog/itdr-buyers-guide/ Thu, 12 Feb 2026 00:00:00 GMT The complete ITDR buyer's guide for 2026. Evaluate identity threat detection solutions with vendor questions, red flags, attack scenarios, and a practical evaluation framework. hello@gethumming.io (Hummingbird Security) ITDR Identity Security Buyer's Guide MFA Fatigue Attacks: Why Your Security Team is Still Vulnerable https://gethumming.io/blog/mfa-fatigue-attacks-explained/ https://gethumming.io/blog/mfa-fatigue-attacks-explained/ Thu, 13 Nov 2025 00:00:00 GMT MFA fatigue attacks bypass even the strongest authentication systems. Learn how attackers exploit notification fatigue and how to defend against them. hello@gethumming.io (Hummingbird Security) Security MFA Attacks