General Discussions

The Hidden Dangers of API Tokens in NHI Security: Lessons from BeyondTrust Breach

First post and replies  | Last post by Britive, 1 month ago

SOC 2 Compliance & CPAM: How to Protect Privileged Access to Sensitive Data

First post and replies  | Last post by Britive, 1 month ago

Jaguar Land Rover Cyberattack Explained Through MITRE ATT&CK

First post and replies  | Last post by Unosecur, 1 month ago

Learning to Secure the Supply Chain at OWASP AppSec Days France 2025

First post and replies  | Last post by GitGuardian, 1 month ago

Zero Standing Privilege Explained: Minimizing Risk, Maximizing Security

First post and replies  | Last post by NHI Mgmt Group, 1 month ago

Separation of Duties: Your First Line of Defense Against Insider Threats

First post and replies  | Last post by NHI Mgmt Group, 1 month ago

The Hidden Risks of Non-Human Identities: Insights from Dropbox’s Breach

First post and replies  | Last post by Oasis Security, 1 month ago

Lessons from the MCP Breach: How Shadow AI Exposed Enterprise Risks

First post and replies  | Last post by Oasis Security, 1 month ago

Crypto Agility in Practice: A CISO’s Guide to Post-Quantum Readiness

First post and replies  | Last post by NHI Mgmt Group, 1 month ago

Application Sprawl Explained: The Hidden Risk of Ungoverned Apps in 2025

First post and replies  | Last post by SailPoint, 1 month ago

Attribute-Based Access Control (ABAC): The Next Generation of Identity Governance

First post and replies  | Last post by Clarity Security, 2 months ago

Why Enterprises Can’t Afford to Delay Identity Modernization: Risks and Next Steps

First post and replies  | Last post by Unosecur, 2 months ago

What Is Unified Identity Fabric? 5 Key Answers for Security and Compliance Leaders

First post and replies  | Last post by Unosecur, 2 months ago

The Non-Human Identities Ownership Problem: Who Really Governs Your Enterprise NHIs?

First post and replies  | Last post by GitGuardian, 2 months ago

Shai-Hulud: Inside a Persistent Secret-Leaking Campaign Targeting Enterprises

First post and replies  | Last post by GitGuardian, 2 months ago

Preventing OAuth Attacks in SaaS: Lessons from the Salesforce-Drift Breach

First post and replies  | Last post by Akeyless, 2 months ago

How a Secrets Manager Extension for Cursor and VS Code Strengthens Developer Security

First post and replies  | Last post by Akeyless, 2 months ago

What the Salesloft Drift Breach Teaches Us About Access Token Security

First post and replies  | Last post by SlashID, 2 months ago

Cursor RCE in Open Repos: How Simple Access Leads to Full Compromise

First post and replies  | Last post by Oasis Security, 2 months ago

From SharePoint to SecretPoint: How Microsoft Auto-Sync Exposes Enterprise Secrets

First post and replies  | Last post by Entro Security, 2 months ago