IBM Products

Behavioral biometrics is a form of authentication that analyzes unique patterns in a user’s activity—such as mouse or touchscreen usage—to verify identity.

Identity governance and administration (IGA) manages regulatory compliance for digital identities and user access rights in a computer system.

FIDO2 (Fast Identity Online 2) is an open standard for passwordless authentication that was developed by the FIDO Alliance in partnership with the World Wide Web Consortium.

Threat actors have been heavily targeting the industrial sector in recent years. Learn more about why this industry is being targeted and what organizations can do to protect against these cyberattacks.

Identity and access management (IAM) tools help ensure that the right people can access the right resources for the right reasons at the right time.

IBM X-Force has been monitoring phishing email campaigns from Hive0131 pretending to be The Judiciary of Colombia and using fake notifications to Colombians of criminal proceedings to deliver malware. Learn more about this threat.

Since the start of 2025, IBM X-Force has been tracking a phishing campaign targeting financial institutions worldwide, using weaponized Scalable Vector Graphics (SVG) files to initiate multi-stage malware infections. Learn more.

Distributed denial-of-service (DDoS) protection and mitigation is the use of cybersecurity tools and services to prevent or quickly resolve DDoS attacks.

Cryptojacking is a type of cyberattack in which cybercriminals hijack the computing resources of victims’ devices to mine cryptocurrency without permission.

Alert fatigue is a state of mental and operational exhaustion caused by an overwhelming number of alerts—many of which are low-priority, false positives or otherwise non-actionable.

Mispadu, or Ursa, is back. Learn more about the overlay financial malware, what the attacks look like and how to protect yourself and your assets from it.

Since late March 2025, IBM Security has been closely monitoring a sophisticated spear phishing campaign designed to steal Amazon and Amazon Prime credentials and primarily targeting residents of France. Learn more.

In the age of generative AI, many traditionally reliable defenses against social engineering attacks no longer work.

API security is a set of practices and procedures that protect application programming interfaces (APIs) and the data they transmit from misuse, malicious bot attacks and other cybersecurity threats.

AI security uses artificial intelligence (AI) to enhance an organization's security posture.

Previously discovering a method for bypassing even the strictest WDAC policies by backdooring trusted Electron applications, the IBM X-Force Red team continued their research and can now bypass the restriction of executing JavaScript code only.

Discovered in 2023, Rilide is a sophisticated piece of malware that targets Chromium-based browsers to hijack user activity and steal sensitive data. Learn more about the malware and how it operates.

Distributed denial-of-service (DDoS) attacks flood websites and other network resources with malicious traffic, making apps and services unavailable to users.

Identity security is a cybersecurity discipline focused on protecting digital identities and the systems that manage them.

Identity threat detection and response (ITDR) systems are proactive cybersecurity tools that monitor systems and apps to find and fix identity-based threats.

FIDO (Fast Identity Online) authentication is a set of open standards for passwordless authentication for websites, applications and online services.

AI for fraud detection refers to implementing machine learning (ML) algorithms to mitigate fraudulent activities.

As cybersecurity teams thwart more direct hacks, attackers are turning to a quainter style of scam, with some new twists.

A vulnerability assessment is a systematic process used to identify, evaluate and report on security weaknesses across an organization’s digital environment.

An open letter from JP Morgan's Chief Information Security Officer shines a light on the urgent need for organizations to build security into their tools, technologies and process by default.

Kyri Lea and Elizabeth Christensen have developed m-Ray, an automated vulnerability scanner for IBM mainframes running the z/OS operating system.

Two-factor authentication (2FA) verifies a user’s identity by asking for two pieces of proof, such as an online account password and a one-time passcode.

Multifactor authentication (MFA) verifies a user’s identity by requiring at least two forms of proof, such as a password, fingerprint or other biometric data.

Explore how agentic AI introduces new security concerns in this conversation between world-renowned cybersecurity leader Wendi Whitmore and David Levy

The X-Force Red team was able to breach a hardened external perimeter and gain code execution to an on-premises SQL server, resulting in full Active Directory compromise. Learn how they did it, and how to prevent it from happening to you.