Shift left, stay ahead: The case for early threat prevention
Cybersecurity strategies today often focus on what happens after an attacker gains entry or how to respond once malicious activity...
Cybersecurity
#Pixnapping: Android Timing Attack Sends Google Back to the Drawing Board
Researchers discover a new way to steal secrets from Android apps.Anything any Android app can display is vulnerable to the Pixnapping...
No Good Deed Goes Unpunished: Why Voluntary Disclosure of Cybersecurity Violations Doesn’t Mean You Won’t Be Punished for Bad Security
What do you do when you discover that your cybersecurity is not what you have promised, even though there has...
Rethinking Microsoft Security: Why Identity is Your First Line of Defense
Microsoft Identity systems sit at the core of nearly every enterprise. Active Directory, Entra ID, Microsoft 365, Intune and Teams...
Oracle Warns of New EBS Vulnerability That Allows Remote Access
Oracle over the weekend issued another security alert about a vulnerability in its E-Business Suite (EBS), the software family that...
Is America Behind the Ball When It Comes to AI Regulation?
When it comes to regulating AI, America seems to be, at best, taking a wait-and-see or perhaps a laissez-faire approach....
Security Misconfigurations: The Future Disaster That’s Staring You in the Face
Nobody thinks they’ll leave the back door wide open until it happens. Sometimes the biggest cybersecurity weaknesses are the ones that hide in plain sight, where...
The SharePoint Blind Spot: How Legacy IGA Failed to Stop Volt Typhoon
The modern attacker’s mantra isn’t “break in” – it’s “log in.” Advanced groups, such as Volt Typhoon, demonstrate that identities,...
How Reassured Are You by Your Cloud Compliance?
The Vital Role of Non-Human Identities in Cloud Compliance What makes cloud compliance an intricate challenge for modern enterprises? With...
Empowering Teams with Efficient Secrets Rotation
How Can Efficient Secrets Rotation Empower Your Cybersecurity Team? How can organizations ensure the security of machine identities and secrets...
Revisiting CISA Priorities for FY2026 and Beyond
Lohrmann on Cybersecurity The Cybersecurity and Infrastructure Security Agency is under new leadership and focus as we enter FY2026. So...
Is Your Spend on Cloud Security Justified?
How Secure Are Your Non-Human Identities? Have you ever considered how secure your non-human identities are? Safeguarding Non-Human Identities (NHI)...
How Safe Are Your Non-Human Identities Really?
Are You Harnessing the Full Potential of Non-Human Identities in Your Cloud Security Strategy? Non-human identities (NHIs) are revolutionizing the...
Independent Verification of NHI Security: Necessary?
Why Is Independent Verification of Non-Human Identities Crucial for Cybersecurity? When it comes to cybersecurity, how often do organizations think...
Hackers Behind the Code – Podcast
Hackers Behind the Code I recently had the privilege of being a guest on the “Hackers Behind the Code” podcast,...
