Lucene search
K

9 matches found

The Hacker News
The Hacker News
added 2025/11/18 11:0 a.m.5 views

Beyond IAM Silos: Why the Identity Security Fabric is Essential for Securing AI and Non-Human Identities

Identity security fabric ISF is a unified architectural framework that brings together disparate identity capabilities. Through ISF, identity governance and administration IGA, access management AM, privileged access management PAM, and identity threat detection and response ITDR are all integrat...

7AI score
Exploits0
Qualys Blog
Qualys Blog
added 2025/10/15 2:10 p.m.3 views

Qualys ETM Identity — The First True Quantification of the Identity Perimeter

Security has always been about controlling who can do what and where. In 2025, that control is mediated entirely by identity. When an attacker “logs in,” not "breaks in", they inherit legitimate permissions, blend into normal telemetry, and pivot across AD, Entra/Okta, SaaS, and cloud, driving...

7.2AI score
Exploits0
The Hacker News
The Hacker News
added 2025/06/30 11:0 a.m.6 views

Leveraging Credentials As Unique Identifiers: A Pragmatic Approach To NHI Inventories 

Identity-based attacks are on the rise. Attacks in which malicious actors assume the identity of an entity to easily gain access to resources and sensitive data have been increasing in number and frequency over the last few years. Some recent reports estimate that 83% of attacks involve compromis...

7.1AI score
Exploits0
The Hacker News
The Hacker News
added 2025/06/12 11:0 a.m.12 views

Non-Human Identities: How to Address the Expanding Security Risk

Human identities management and control is pretty well done with its set of dedicated tools, frameworks, and best practices. This is a very different world when it comes to Non-human identities also referred to as machine identities. GitGuardian's end-to-end NHI security platform is here to close...

7.1AI score
Exploits0
The Hacker News
The Hacker News
added 2024/10/03 3:6 p.m.18 views

The Secret Weakness Execs Are Overlooking: Non-Human Identities

For years, securing a company's systems was synonymous with securing its "perimeter." There was what was safe "inside" and the unsafe outside world. We built sturdy firewalls and deployed sophisticated detection systems, confident that keeping the barbarians outside the walls kept our data and...

7AI score
Exploits0
The Hacker News
The Hacker News
added 2024/07/01 10:51 a.m.32 views

End-to-End Secrets Security: Making a Plan to Secure Your Machine Identities

At the heart of every application are secrets. Credentials that allow human-to-machine and machine-to-machine communication. Machine identities outnumber human identities by a factor of 45-to-1 and represent the majority of secrets we need to worry about. According to CyberArk's recent research,...

6.7AI score
Exploits0
The Hacker News
The Hacker News
added 2024/06/28 11:0 a.m.86 views

Combatting the Evolving SaaS Kill Chain: How to Stay Ahead of Threat Actors

The modern kill chain is eluding enterprises because they aren't protecting the infrastructure of modern business: SaaS. SaaS continues to dominate software adoption, and it accounts for the greatest share of public cloud spending. But enterprises and SMBs alike haven't revised their security...

7.4AI score
Exploits0
Citrix
Citrix
added 2024/03/14 12:0 a.m.5 views

When adding machines, the default value of account names start with was incorrect.

When trying to add machines to a catalog in the Citrix DaaS manage page, on the "Machine Identities" page of the "Add machines" wizard, optionally, you can specify what the account names start with. It is expected that the default account names set in the text were the number of maximum existing...

6.9AI score
Exploits0
ThreatPost
ThreatPost
added 2020/03/05 11:29 a.m.67 views

Let’s Encrypt Pushes Back Deadline to Revoke Some TLS Certificates

Let’s Encrypt said it will give users of its Transport Layer Security TLS certificates more time to replace 1 million certificates that are still active and potentially affected by a Certificate Authority Authorization CAA bug before it revokes them. The popular free certificate authority had giv...

7.2AI score
Exploits0References7
Rows per page
Query Builder