Two-decade-old vulnerability found in Wansview security camera
Cyber Insider disclosed that a popular Wansview indoor security camera model, the WVC Q5, was found to be shipping with a web server vulnerable to a flaw fir...
SC Media
20 articles
How to Evaluate CNAPP and Cloud Security Control Planes
These platforms enforce consistent security baselines across AWS, Azure, and Google Cloud environments through unified policy frameworks
Lampion banking malware continues to target Portuguese organizations
A banking Trojan known as Lampion, believed to have originated in Brazil, is still actively used in ongoing attacks targeting Portuguese organizations.
FedRAMP director warns tech companies against selling to federal agencies if they can't fix vulnerabilities
Technology companies that cannot quickly fix dangerous vulnerabilities should not be allowed to sell their products to federal agencies, according to Pete Wa...
Hospital security compromised by social engineering and poor network practices
As outlined in The Register, a recent security assessment highlighted significant vulnerabilities within the healthcare sector, particularly concerning compr...
Google rolls out selfie video sign-in for account recovery
As outlined in The Register, Google has introduced a new account recovery method that utilizes selfie videos, allowing users to regain access to their accoun...
Fabricated machine identities pose overlooked security risk
The Hacker News disclosed that a significant and often overlooked security threat involves fabricated machine identities, a concept analogous to synthetic id...
Millions of vehicles vulnerable to Bluetooth car theft attacks
Millions of vehicles equipped with dealer-installed KARR and SWDS security systems are susceptible to Bluetooth-based attacks that could allow unauthorized a...
End-to-end encryption and the third round of the ‘going dark’ debate
A new paper analyzes the current controversies over end-to-end encryption (E2EE), which governments worldwide are seeking to limit for law enforcement and na...
How to Evaluate Attack Surface Management Platforms
The governance chain evaluation framework tests whether a platform can enforce the workflows that turn discovery into governance
Indicators of Compromise (IOCs) vs Indicators of Attack (IOAs)
Each signal type drives different control decisions
Nation-State Threat Actors Explained
Understanding what defines a nation-state actor — and what does not — changes how defenders evaluate threat intelligence relevance
Identity Protocols Were Not Built for AI Agents
Non-human identities break protocol assumptions
How to Evaluate Enterprise AI Security and Governance Platforms
Can your existing security tools cover AI-specific risks or do you need to deploy a purpose-built AI governance platform?
Fixing Vulns Is Harder Than Finding Them - PSW #936
Secrets, Certificates, and Key Management for Identity Teams
Microservices authentication represents the most common deployment
Don't break in, log in: How abuse of trust leads to system compromise
Today's attackers win not by defeating security controls, but by exploiting the trust we place in legitimate technologies.
What Is Network Security?
Network security is the practice of protecting the communication paths that connect devices, applications, and data
Zero Trust Architecture: Identity as the Security Perimeter
ZTA requires continuous verification of user and device identity before granting access to specific resources
Why Mythos is the cybersecurity crisis we need
How Mythos gives us a good reason to finally modernize our systems, architectures and security tools.