If you don't have the professional experience, build it yourself. For the past year I've been using Microsoft Entra ID to manage all objects within my (fictitious) healthcare startup, OSHA, including user accounts, group accounts, devices and applications. OSHA operates across m…
Schomer — Principal Security Solutions Architect & Founder
framework engine. I just locked in the architecture showcase for the Build With AI Hackathon. Built completely from scratch as a solo backend developer on a non-rooted Android device running Termux, the ETBV gateway engine achieves absolute logic assurance. The Metrics: • Valid…
“We use passkeys, so phishing can't get us.” I wouldn't be so confident. Passkeys are a major improvement in authentication security. But attackers are adapting around the technology rather than simply attacking the cryptography. Microsoft has documented active campaigns where a…
We spent years securing human users. Now we're creating digital employees that need the same security controls. AI agents are moving beyond answering questions. They're increasingly being given the ability to: → Call APIs → Query databases → Execute code → Access cloud resources…
What if the person asking you to “fix your computer” is actually trying to compromise the entire company? This isn't science fiction. Microsoft has reported attacks where threat actors impersonate IT support through Microsoft Teams, convincing targets to interact with them and u…
Schomer — Principal Security Solutions Architect & Founder
Look at the sheer velocity of this week's tactical threat snapshot. BeyondTrust, Ivanti, Cisco, and Palo Alto Networks all had critical edge vulnerabilities weaponized in the wild. Take a close look at the mechanics behind the BeyondTrust exploit (CVE-2026-102764). It’s a 9.3 CV…
HOTEL NETWORK SEGMENTATION: SEPARATE SSIDs DO NOT GUARANTEE ISOLATION A hotel may expose multiple network zones through the same physical infrastructure: - Guest wireless - Staff endpoints - PMS and operational services - POS and payment infrastructure - CCTV and access control…
Schomer — Principal Security Solutions Architect & Founder
Why the AI Agent Crisis is a Layer Zero Integrity Problem The security conversation is shifting from perimeter access ("who got in") to autonomous machine execution ("what is the agent doing on our behalf"). When AI agents act at machine speed—calling APIs, altering workflows, a…
One stolen password can become an entire security incident. The problem isn't always the password itself. It's what that identity can reach. A compromised account may provide access to: → Email and collaboration tools → Cloud consoles → Internal applications → Customer informati…
Schomer — Principal Security Solutions Architect & Founder
The boundaries are collapsing everywhere you look. Check out the breaking intel on the feed right now. We aren't just dealing with basic application bugs anymore—we are looking at structural engineering failures across the board: 🔘 Zero-Click Ad Spyware: Adversaries are deployi…
Why are people still trying to defend tomorrow's infrastructure with yesterday's thinking? We've spent decades building careers, architectures, security programs, and entire industries around assumptions that made sense when we controlled the network, owned the infrastructure, a…
Schomer — Principal Security Solutions Architect & Founder
You cannot out-patch an 11-minute automated exploit window. When a critical edge appliance or internal routine blindly trusts an incoming payload simply because it made it past the front door, the game is already over. The threat actor weaponizes that missing validation gate, du…
Schomer — Principal Security Solutions Architect & Founder
THE DOOM LOOP OF DOWNSTREAM DETECTION: WHY REACTIVE SECURITY IS COLLAPSING The industry is currently drowning in an administrative "patch tsunami." Frontier AI is being weaponized by threat actors to generate thousands of polymorphic zero‑click variants every single cycle, and s…
Schomer — Principal Security Solutions Architect & Founder
🔒 HACKERS DON'T BREAK IN; THEY LOG IN. WHY IDENTITY SECRETS ARE AN ARCHITECTURAL TRAP. The industry is learning a painful lesson: traditional IAM and network segmentation are completely helpless against an attacker holding valid, compromised credentials. When a rogue actor uses…
Schomer — Principal Security Solutions Architect & Founder
Modern attacks don't always look like attacks. A compromised employee account can authenticate normally. A stolen session token can bypass the login process entirely. An attacker with valid credentials can move through systems without triggering the alarms you expected. This is…
Schomer — Principal Security Solutions Architect & Founder
Critical Perimeter Alert: The Reality of Chained Zero-Clicks Today's CISA KEV expansion highlights a massive reality check for enterprise defense. Look at the Ivanti Connect Secure chain (CVE-2026-104935): 1. Auth bypass via an edge script (welcome.cgi) 2. Arbitrary file-write v…
Schomer — Principal Security Solutions Architect & Founder
The reason our framework handles edge infrastructure variance natively where standard automation drops the ball is simple: we validate the execution boundary at Layer Zero, pre-authentication. Look at what happened this month with Cisco and NetScaler—major enterprises burned tho…
Schomer — Principal Security Solutions Architect & Founder
Stop Guessing Your Security Posture. Watch It Enforce in Real Time. The Post Text If your security team is waiting around for a vendor's tool to publish a CVE patch before you can block an ongoing exploit, you are fighting a losing battle. Take a look at our Eternal Boundaries A…
Schomer — Principal Security Solutions Architect & Founder
I just created a new group: Eternal Boundaries! Join us and be part of the conversation. #LayerZero #ApplicationSecurity #STIX21 #AppSec #ZeroTrust Check out Eternal Boundaries → https://cyberr.ai/groups/2d47e5db-a0cb-4c58-badc-e20eee16f9dd
Schomer — Principal Security Solutions Architect & Founder
The Changed Locks Paradigm and the Blind Spot of Identity We need to talk about the tactical reality behind the ongoing FortiBleed infrastructure panic. The FBI and Secret Service didn't issue an emergency joint advisory because threat actors are writing complex, flashy zero-day…
Schomer — Principal Security Solutions Architect & Founder
Machine-Speed Exploits Require Pre-Execution Layer Zero Trust We are watching the cyber-attack lifecycle shrink from days to minutes. Threat actors are no longer just writing malware; they are deploying agentic frameworks to automate the discovery of existing software flaws and…
Schomer — Principal Security Solutions Architect & Founder
Pre-Execution State Validation: Decoupling Validation Matrices from Execution Logic at Layer Zero Technical Abstract As network-connected environments grow more complex, software stacks face an increasing risk of Emergent Trust Boundary Violations (ETBV). Traditional network pro…