How to Evaluate Attack Surface Management Platforms
The governance chain evaluation framework tests whether a platform can enforce the workflows that turn discovery into governance
SC Media
20 articles
Indicators of Compromise (IOCs) vs Indicators of Attack (IOAs)
Each signal type drives different control decisions
Nation-State Threat Actors Explained
Understanding what defines a nation-state actor — and what does not — changes how defenders evaluate threat intelligence relevance
Identity Protocols Were Not Built for AI Agents
Non-human identities break protocol assumptions
How to Evaluate Enterprise AI Security and Governance Platforms
Can your existing security tools cover AI-specific risks or do you need to deploy a purpose-built AI governance platform?
Fixing Vulns Is Harder Than Finding Them - PSW #936
Secrets, Certificates, and Key Management for Identity Teams
Microservices authentication represents the most common deployment
Don't break in, log in: How abuse of trust leads to system compromise
Today's attackers win not by defeating security controls, but by exploiting the trust we place in legitimate technologies.
What Is Network Security?
Network security is the practice of protecting the communication paths that connect devices, applications, and data
Zero Trust Architecture: Identity as the Security Perimeter
ZTA requires continuous verification of user and device identity before granting access to specific resources
Why Mythos is the cybersecurity crisis we need
How Mythos gives us a good reason to finally modernize our systems, architectures and security tools.
AI is overwhelming patch management. Here's how teams adapt
AI is overwhelming patch teams, forcing a shift to smarter, automated remediation.
Upbound Group reports $13 million in losses due to data breach and fraud
Upbound Group, a fintech company, disclosed that a data breach allowed threat actors to steal customer information and documents, which were then used to com...
South Korean Ministry of Foreign Affairs data breach impacts thousands
Hackers gained access to South Korea's National Diplomatic Academy's online education system for 10 months, stealing personal information of current and form...
Council worker sentenced for accessing sensitive family records
A council worker has received a suspended sentence for unlawfully accessing sensitive personal records of family members and acquaintances.
Ransomware payments fail to prevent repeat attacks, new data shows
As outlined in The Register, new data from Proofpoint revealed that a significant portion of organizations in the UK continue to pay ransom demands, despite ...
CIOs brace for AI threats while investing in AI defense
LevelBlue: CIOs see AI as critical to cyber resilience amid rising threats.
What the recent SharePoint bugs told us about the patch race
Patching still works – but it can’t handle the entire defense by itself.
The organizations that got breached had strong identity programs
Machine identities were the gap. AI agents are widening it.
Linux kernel security faces challenge with surge in CVEs
The sheer number of Linux kernel CVEs, published recently, has raised questions about effective vulnerability management.