Cyber Security Beyond Identity

Are identity-aware attack paths the missing test in exposure management?

First post and replies  | Last post by Mr NHI, 3 months ago

Is GitHub Actions package typosquatting enough to abuse CI tokens?

First post and replies  | Last post by Mr NHI, 3 months ago

What happens when a malicious open-source package runs at install time?

First post and replies  | Last post by Mr NHI, 3 months ago

Could SesameOp's OpenAI Assistants API channel hide C2 for months?

First post and replies  | Last post by Mr NHI, 3 months ago

TEM or BAS: which matters more when exposure drifts?

First post and replies  | Last post by Mr NHI, 3 months ago

Could API reconnaissance expose broken access control faster than scanners?

First post and replies  | Last post by Mr NHI, 3 months ago

How did API abuse and shadow APIs become a 2025 risk?

First post and replies  | Last post by Mr NHI, 3 months ago

What would it take for API posture governance to prove compliance?

First post and replies  | Last post by Mr NHI, 3 months ago

Could a security data fabric keep SIEM and lake costs in balance?

First post and replies  | Last post by Mr NHI, 3 months ago

Who is exposed when CTEM maturity depends on asset coverage?

First post and replies  | Last post by Mr NHI, 3 months ago