The Employee Left. The Access Did Not.
Disabling Active Directory is no longer enough. Effective offboarding must revoke distributed human access, long-lived secrets and machine credentials before they become orphaned trust.
Read article →The API Key Is Becoming The New Password
API authentication should match the trust scenario: delegated user access, managed workload identity, mutual TLS, short-lived pipeline tokens and tightly scoped third-party credentials are not interchangeable.
Read article →MFA Did Not Fail. The User Was Convinced To Hand Over The Session.
MFA remains essential, but session tokens, recovery processes, help-desk verification, device trust and step-up controls determine whether authenticated access should remain trusted.
Read article →The Next Insider Threat May Not Be Human. It May Be an AI Agent.
AI agents are becoming non-human privileged identities. Their authority must be governed as carefully as any privileged user.
Read article →The New Security Perimeter Is No Longer The Network. It Is Identity.
The security perimeter has moved from network location to identity, permissions and continuously evaluated trust.
Read article →