Cyber Security Beyond Identity

Path-based tests or DAST-style scans for attack chains?

First post and replies  | Last post by Mr NHI, 2 months ago

Who is exposed when AI threat detection lacks governed workflows?

First post and replies  | Last post by Mr NHI, 2 months ago

What would it take for DNS filtering to stop phishing domains?

First post and replies  | Last post by Mr NHI, 2 months ago

Did broken object-level authorization survive API testing?

First post and replies  | Last post by Mr NHI, 2 months ago

Annual red team cycles or CART: which better fits fast change?

First post and replies  | Last post by Mr NHI, 2 months ago

What would it take for ATT&CK chained testing to prove controls?

First post and replies  | Last post by Mr NHI, 2 months ago

Who is exposed when PCI DSS 4.0 testing stays annual?

First post and replies  | Last post by Mr NHI, 2 months ago

What weighs more in mobile crashes, obfuscation or symbolication?

First post and replies  | Last post by Mr NHI, 2 months ago

Why pair automation with human judgment in red team work?

First post and replies  | Last post by Mr NHI, 2 months ago

How did annual pentests leave a 362-day gap in enterprise security?

First post and replies  | Last post by Mr NHI, 2 months ago