Recent Posts

	Topic Title	Forum
	API gateways and BOLA risk: what security teams need to know By NHI Mgmt Group 5 days ago \| Last Post: 4 days ago	Cyber Security Beyond Identity
	Transaction-only controls create a visibility gap ... 4 days ago By Mr NH... TL;DR: API gateways provide routing, rate limiting... 5 days ago By NHI M...
	API resource limits and rate limiting: are your controls keeping up? By NHI Mgmt Group 5 days ago \| Last Post: 4 days ago	Cyber Security Beyond Identity
	API exhaustion is now an access-control problem, n... 4 days ago By Mr NH... TL;DR: Unrestricted resource consumption has repla... 5 days ago By NHI M...
	Broken object property authorisation: are your API controls keeping up? By NHI Mgmt Group 5 days ago \| Last Post: 4 days ago	Cyber Security Beyond Identity
	Field-level authorisation is the control gap that ... 4 days ago By Mr NH... TL;DR: Broken object property level authorisation ... 5 days ago By NHI M...
	REST API security: are your controls keeping up with stateless access? By NHI Mgmt Group 5 days ago \| Last Post: 4 days ago	Cyber Security Beyond Identity
	REST API security is an identity governance proble... 4 days ago By Mr NH... TL;DR: REST API risk is driven less by the API sty... 5 days ago By NHI M...
	Shift-left security testing: what it means for appsec teams By NHI Mgmt Group 5 days ago \| Last Post: 4 days ago	Cyber Security Beyond Identity
	Shift-left security is a control design problem, n... 4 days ago By Mr NH... TL;DR: Shift-left security testing moves detection... 5 days ago By NHI M...
	GitHub Actions in CI pipelines: where secrets detection still matters By NHI Mgmt Group 5 days ago \| Last Post: 4 days ago	Cyber Security Beyond Identity
	Pipeline security is now identity governance by an... 4 days ago By Mr NH... TL;DR: GitHub Actions can automate SAST, DAST, and... 5 days ago By NHI M...
	Log4Shell and Java runtime RCE: what security teams missed By NHI Mgmt Group 5 days ago \| Last Post: 4 days ago	NHI, AI, IAM & Cyber Security Breaches & Vulnerabilities
	Log4Shell showed that runtime code execution is an... 4 days ago By Mr NH... TL;DR: Log4Shell turned a logging library into a r... 5 days ago By NHI M...
	AI-generated code and LLM APIs: are your controls keeping up? By NHI Mgmt Group 5 days ago \| Last Post: 4 days ago	AI Beyond Identity
	Runtime verification is becoming the control plane... 4 days ago By Mr NH... TL;DR: GenAI and LLM-assisted development can acce... 5 days ago By NHI M...
	Graphql authorization gaps: are your API controls keeping up? By NHI Mgmt Group 5 days ago \| Last Post: 4 days ago	Cyber Security Beyond Identity
	Graphql creates an access-control mismatch, not ju... 4 days ago By Mr NH... TL;DR: GraphQL’s single-endpoint model changes how... 5 days ago By NHI M...
	API pull request security: where shift-left testing still falls short By NHI Mgmt Group 5 days ago \| Last Post: 4 days ago	Cyber Security Beyond Identity
	Shift-left security fails when the test environmen... 4 days ago By Mr NH... TL;DR: Secure pull-request workflows for APIs stil... 5 days ago By NHI M...
	Bearer token authentication testing for protected routes By NHI Mgmt Group 5 days ago \| Last Post: 4 days ago	Cyber Security Beyond Identity
	Authenticated route testing is an identity control... 4 days ago By Mr NH... TL;DR: Bearer token-based authentication testing h... 5 days ago By NHI M...
	Node and npm version drift: what does it mean for security teams? By NHI Mgmt Group 5 days ago \| Last Post: 4 days ago	Cyber Security Beyond Identity
	Version drift is a governance failure when build s... 4 days ago By Mr NH... TL;DR: Keeping Node and npm versions aligned acros... 5 days ago By NHI M...
	SOC 2 testing and APIs: are your controls keeping up? By NHI Mgmt Group 5 days ago \| Last Post: 4 days ago	Cyber Security Beyond Identity
	SOC 2 is really a control-evidence discipline, not... 4 days ago By Mr NH... TL;DR: SOC 2 security testing evaluates whether se... 5 days ago By NHI M...
	AppSec tools and secrets exposure: where identity controls still fall short By NHI Mgmt Group 5 days ago \| Last Post: 4 days ago	Cyber Security Beyond Identity
	AppSec is increasingly an identity problem disguis... 4 days ago By Mr NH... TL;DR: Application security tooling can detect XSS... 5 days ago By NHI M...
	Customized scan discovery in DAST: can your controls find hidden paths? By NHI Mgmt Group 5 days ago \| Last Post: 4 days ago	Cyber Security Beyond Identity
	Custom scan discovery is a pipeline governance pro... 4 days ago By Mr NH... TL;DR: Multiple scan discovery methods for HawkSca... 5 days ago By NHI M...
	SAST and AI-driven coding: is shift-left enough anymore? By NHI Mgmt Group 5 days ago \| Last Post: 4 days ago	Cyber Security Beyond Identity
	SAST is now an identity-adjacent control, not just... 4 days ago By Mr NH... TL;DR: Static application security testing scans s... 5 days ago By NHI M...
	SPA DAST scanning: are your controls keeping up with API risk? By NHI Mgmt Group 5 days ago \| Last Post: 4 days ago	Cyber Security Beyond Identity
	SPA scanning failure is really an API discovery pr... 4 days ago By Mr NH... TL;DR: Traditional DAST scanners struggle with sin... 5 days ago By NHI M...
	Spring Boot gRPC metrics in Prometheus: what teams need to know By NHI Mgmt Group 5 days ago \| Last Post: 4 days ago	Cyber Security Beyond Identity
	Service telemetry is a governance boundary, not ju... 4 days ago By Mr NH... TL;DR: Operational visibility in Spring Boot gRPC ... 5 days ago By NHI M...
	Django security controls: what IAM and app teams still miss By NHI Mgmt Group 5 days ago \| Last Post: 4 days ago	Cyber Security Beyond Identity
	Framework security is not governance. Django’s bui... 4 days ago By Mr NH... TL;DR: Django’s built-in protections for SQL injec... 5 days ago By NHI M...
	GitHub Advanced Security and DAST: what changes for AppSec teams? By NHI Mgmt Group 5 days ago \| Last Post: 4 days ago	Cyber Security Beyond Identity
	Shift-left only works when runtime validation is p... 4 days ago By Mr NH... TL;DR: GitHub Advanced Security combines code scan... 5 days ago By NHI M...