Discussions, questions and news about Single Sign-On from cybersecurity professionals on Cyberr.
0 members · 22 posts
samuel watua Soita — Full Stack Software Engineer
“We use passkeys, so phishing can't get us.” I wouldn't be so confident. Passkeys are a major improvement in authentication security. But attackers are adapting around the technology rather than simply attacking the cryptography. Microsoft has documented active campaigns where a…
· 0 reactions · 0 comments
Schomer — Principal Security Solutions Architect & Founder
Samuel Watua Soita dropped an excellent point recently about how AI is rewriting the economics of phishing. The takeaway is clear: We can no longer train users to spot fakes when the fakes are mathematically perfect copies. Traditional awareness training looks at the perimeter—b…
· 5 reactions · 2 comments
Quinton Plaatjies — SOC Engineer
OAuth & MCP Investigation Checklist: 4 Steps to Assess Risk As organizations adopt OAuth-connected applications and Model Context Protocol (MCP) integrations, it's important to evaluate how these connections could expose sensitive data or increase attack surface. 1. Inventory Co…
· 3 reactions · 1 comments
Schomer — Principal Security Solutions Architect & Founder
EXECUTIVE MAPPING REPORT: EXTENDED TRUST BOUNDARY VALIDATION Document Reference: ETBV-CR-2026-OCT Classification: Internal Architectural Review / Executive Briefing Author: Justin Schomer, Founder --- 1. Executive Summary This report contextualizes the systemic, industry-wide pe…
· 3 reactions · 0 comments
Cynthia Orina — Cybersecurity Analyst
Why Everyone Should Turn On MFA A strong password is important, but a password alone is not enough. Multi-Factor Authentication (MFA) adds an extra layer of security by requiring two or more forms of verification before access is granted. For example: 🔑 Something you know: Pass…
· 4 reactions · 0 comments
Lara Borenovic — Building Cyberr
North Korean IT workers are using fake identities to get hired by foreign companies. At the same time, fake recruiters are targeting IT professionals through malicious coding assignments and technical interviews. The latest joint advisory from Japanese, US, Australian and German…
· 5 reactions · 1 comments
Rafael Martin Jr. — Cybersecurity Professional | CompTIA Security+ | SOC & Security Operations | Incident Response | SIEM & Log Analysis | NIST CSF | Enterprise IT & Operations
I'm going to be real with you all... I'm looking for someone to give me a chance. I've spent 20 years in tech, marketing, and operations. Salesforce, Intuit, ON24, running my own studio. I've managed $2M portfolios, trained 200+ people, and troubleshot more VPN, SSO, and connect…
· 3 reactions · 0 comments
Zane Anderson — Security Consultant
Breach Intelligence: The Highest-Stakes OSINT Discipline. Breach data provides pre-compromise intelligence that no scanner can replicate. It tells you what has already been broken, what credentials circulate in criminal economies, and whether your organization has been quietly c…
· 2 reactions · 0 comments
Desmond Chiemezie Ugwuanyi — Cybersecurity Analyst
Has successfully verified Microsoft Certified: Identity, Access Administrator Associate (Microsoft) and 1 more certification
· 0 reactions · 0 comments
Harish Sarupuru — Computer Network Engineer
Has successfully verified Microsoft Certified: Identity and Access Administrator Associate (Microsoft)
· 0 reactions · 0 comments
Biswadeb Mukherjee — Security Engineer & Independent Researcher
I didn't pick Cloudflare for security. I picked it for caching. Security is just what stuck. New post on how DNS, origin protection, Access, mTLS, and Turnstile turned into an actual architecture decision — and the one feature (WARP) I ditched in 24 hours because it broke my pen…
· 2 reactions · 0 comments
usama rasheed — Cybersecurity | Web Application Penetration Tester | Vulnerability Assessment | OWASP Top 10 | Burp Suite Professional
📰 Password spraying attacks surge 155x as hackers exploit MFA gaps https://www.bleepingcomputer.com/news/security/password-spraying-attacks-surge-155x-as-hackers-exploit-mfa-gaps/ via BleepingComputer · 🛡️ Powered by Cyberr Threat Intelligence — platform.cyberr.ai/news
· 2 reactions · 0 comments
Zane Anderson — Security Consultant
OSINT Reconnaissance: The Human Layer Is the Weakest Link Bottom Line: You can patch every server, but you can't patch a person's digital footprint. That's why adversaries spend 80% of their time in OSINT before they ever touch your network. Before the first credential is spraye…
· 1 reactions · 0 comments
Melissa Wozney — Detection Engineer | IAM & ITDR Analyst | SOC & GRC Specialist | Python SIEM Automation (120m→30m) | DORA & NIS2 Compliance | Triple MSc CS/DS/AI | W-8BEN Approved Contractor (Remote CET/EST)
Day 1 of Ant Colony Bootcamp: Recruit. You don’t hire access. You hire identity. Recruit Day Day 1 of Ant Colony Bootcamp: Recruit. Before I give any ant a tunnel key, I check: 1. HR ticket exists? 2. manager approved? 3. start date = today? No ticket, no tunnel. That’s NIS2 Art…
· 5 reactions · 0 comments
Melissa Wozney — Detection Engineer | IAM & ITDR Analyst | SOC & GRC Specialist | Python SIEM Automation (120m→30m) | DORA & NIS2 Compliance | Triple MSc CS/DS/AI | W-8BEN Approved Contractor (Remote CET/EST)
The Auditor Arrives I’m not in your SIEM. I’m in your anthill. Meet the IAM Auditor Ant 🐜🔍 My job: follow the crumb trail of who got access, when, and why. DORA Art 10 + NIS2 Art 21 both fail on the same thing: no evidence. Today’s 3-minute check: Joiners → account date = HR d…
· 4 reactions · 0 comments
Reuben Murimi — Cybersecurity Analyst
🚀 Sharing a project I've been working on: ReuNexus AI. This video provides a look at ReuNexus AI, an AI-powered platform I'm developing as part of RemuAI. The project focuses on building practical AI experiences while paying close attention to performance, reliability, user exp…
· 3 reactions · 0 comments
Zane Anderson — Security Consultant
Confidentiality is not encryption. A common mistake we see in 2026: teams declaring "we're secure" simply because their data traffic is fully encrypted. Encryption protects data in transit and at rest. It does completely fail to protect data in use, in process, or sitting expose…
· 1 reactions · 0 comments
Malek ANNABI — Cyber Security Engineer
🚨 Critical Vulnerability Spotlight: CVE-2026-20131 and a Bigger Pattern Emerging CVE-2026-20131 is a critical (CVSS 10.0) vulnerability affecting Cisco Secure Firewall Management Center (FMC) the central management plane for Cisco firewall environments. 🔍 What is it? This vuln…
· 5 reactions · 0 comments
Juan Cardona — Founding BDR
🛡️ Nueva alerta: Aumento de ataques dirigidos mediante IA generativa En las últimas semanas, se ha observado un incremento significativo en campañas de phishing altamente personalizadas, impulsadas por herramientas de inteligencia artificial. Estos ataques están logrando tasas…
· 3 reactions · 0 comments
Laurent Halimi — CEO & Founder CYBERR & HEELR
I just created a new group: Identity, Access & Zero Trust! Join us and be part of the conversation. #IAM #ZeroTrust #IdentitySecurity #PAM #PrivilegedAccess #IdentityGovernance #ActiveDirectory #SSO #MFA #FIDO2 #OAuth #CyberArk #Okta #SailPoint #Cyberr #CyberCommunity #Infosec /…
· 2 reactions · 0 comments
Remilekun Olakunle — Cybersecurity SOC Specialist
Has successfully verified SC-900: Security, Compliance & Identity Fundamentals (Microsoft)
· 0 reactions · 0 comments
Melissa Wozney — Detection Engineer | IAM & ITDR Analyst | SOC & GRC Specialist | Python SIEM Automation (120m→30m) | DORA & NIS2 Compliance | Triple MSc CS/DS/AI | W-8BEN Approved Contractor (Remote CET/EST)
Sentry Sunday While you rest, I watch privileged access 🐜🛡️ Sunday 10 min = Monday peace. Sentry check: MFA bypass list reviewed? service accounts with interactive logon? admin sessions >8 hours? NIS2 Art 21(2): policies are not enough. You need ongoing monitoring. I run this…
· 0 reactions · 0 comments