General Discussions

SOC 2 Compliance & CPAM: How to Protect Privileged Access to Sensitive Data

First post and replies  | Last post by Britive, 3 months ago

Jaguar Land Rover Cyberattack Explained Through MITRE ATT&CK

First post and replies  | Last post by Unosecur, 3 months ago

Learning to Secure the Supply Chain at OWASP AppSec Days France 2025

First post and replies  | Last post by GitGuardian, 3 months ago

Zero Standing Privilege Explained: Minimizing Risk, Maximizing Security

First post and replies  | Last post by NHI Mgmt Group, 3 months ago

Separation of Duties: Your First Line of Defense Against Insider Threats

First post and replies  | Last post by NHI Mgmt Group, 3 months ago

The Hidden Risks of Non-Human Identities: Insights from Dropbox’s Breach

First post and replies  | Last post by Oasis Security, 3 months ago

Lessons from the MCP Breach: How Shadow AI Exposed Enterprise Risks

First post and replies  | Last post by Oasis Security, 3 months ago

Crypto Agility in Practice: A CISO’s Guide to Post-Quantum Readiness

First post and replies  | Last post by NHI Mgmt Group, 3 months ago

Application Sprawl Explained: The Hidden Risk of Ungoverned Apps in 2025

First post and replies  | Last post by SailPoint, 3 months ago

Attribute-Based Access Control (ABAC): The Next Generation of Identity Governance

First post and replies  | Last post by Clarity Security, 3 months ago

Why Enterprises Can’t Afford to Delay Identity Modernization: Risks and Next Steps

First post and replies  | Last post by Unosecur, 3 months ago

What Is Unified Identity Fabric? 5 Key Answers for Security and Compliance Leaders

First post and replies  | Last post by Unosecur, 3 months ago

The Non-Human Identities Ownership Problem: Who Really Governs Your Enterprise NHIs?

First post and replies  | Last post by GitGuardian, 3 months ago

Shai-Hulud: Inside a Persistent Secret-Leaking Campaign Targeting Enterprises

First post and replies  | Last post by GitGuardian, 3 months ago

Preventing OAuth Attacks in SaaS: Lessons from the Salesforce-Drift Breach

First post and replies  | Last post by Akeyless, 3 months ago

How a Secrets Manager Extension for Cursor and VS Code Strengthens Developer Security

First post and replies  | Last post by Akeyless, 3 months ago

What the Salesloft Drift Breach Teaches Us About Access Token Security

First post and replies  | Last post by SlashID, 3 months ago

Cursor RCE in Open Repos: How Simple Access Leads to Full Compromise

First post and replies  | Last post by Oasis Security, 3 months ago

From SharePoint to SecretPoint: How Microsoft Auto-Sync Exposes Enterprise Secrets

First post and replies  | Last post by Entro Security, 3 months ago

Inside the GhostAction Attack: 3,325 Exposed Secrets from Compromised GitHub Workflows

First post and replies  | Last post by GitGuardian, 4 months ago