Quadrasystems·1d agoBlog SummaryMany organizations continue to migrate to the cloud, securing access to resources has become a critical priority, traditional security…
BlastWave·1d agoYour Login Should Know Where It Came From: Device Posture in the Age of AI AttacksIn my past life at NSA (where I was trained to be paranoid), one lesson came up again and again: a credential only proves that someone…
Umashankara Kalaiah·6d agoWriting Secure APIs: Moving from API Keys to Fine-Grained Ephemeral Tokens and mTLSStop passing long-lived secrets inside HTTP headers. If your backend services still rely on static API keys or standard multi-hour JWTs…
BlastWave·Oct 26AI Attacks Are Dumb. That’s the Problem.If you’ve sat through a session on AI threats this year, somebody has probably told you the attacks are mostly hype. Sometimes that…
InTowards AIbyDappilig·Oct 22Your AI Agent’s System Prompt Is Not a Security ControlAn Architect’s Guide to Zero Trust, Task Scoped Tokens, and Last Mile Enforcement
BlastWave·Oct 20Hack One, Reach Hundreds: What Supermarkets, Water, and Ports Have in CommonFor most of my career, critical infrastructure attacks had a name and an address. A water plant in Oldsmar. A pipeline company in Georgia…
Stephen Mackey·Oct 2OpenZiti vs NetFoundry: Which Fits?OpenZiti and NetFoundry use the same zero trust foundation, but they assign the operating work to different teams. Choose OpenZiti when you…
