“Tomorrow, 1:00 PM ET: Watch an Attacker Log In Without a Password & Stay In After the Reset” is the kind of headline commonly used to promote a cybersecurity webinar or demonstration focused on identity attacks , particularly attacks that target authentication tokens, sessions,…
Identity is part of the attack surface. A compromised account is only dangerous because of what that account can access. So during an investigation, don't stop at: “Which account was compromised?” Ask: → What privileges did it have? → What systems could it reach? → What data cou…
OSINT Reconnaissance: The Human Layer Is the Weakest Link Bottom Line: You can patch every server, but you can't patch a person's digital footprint. That's why adversaries spend 80% of their time in OSINT before they ever touch your network. Before the first credential is spraye…
Identity Is the New Perimeter: A Defensive Look Inside Scattered Spider During my latest cybersecurity research, I focused on analyzing the multi-stage attack chain utilized by modern social engineering syndicate Scattered Spider. Because their tactics bypass traditional endpoin…
Anthropic’s AI Model Mythos Sends Cybersecurity Stocks Into Freefall Shares of numerous cybersecurity and software companies came under significant pressure on Friday. The trigger was the unveiling of a new AI model by US developer Anthropic called Claude Mythos Preview, which a…
I just created a new group: Identity, Access & Zero Trust! Join us and be part of the conversation. #IAM #ZeroTrust #IdentitySecurity #PAM #PrivilegedAccess #IdentityGovernance #ActiveDirectory #SSO #MFA #FIDO2 #OAuth #CyberArk #Okta #SailPoint #Cyberr #CyberCommunity #Infosec /…