KKazem Mortazavi·Nov 5Non-Human Identities: Why API Keys and Service Accounts Escape Traditional IAMWhen an employee leaves, there is a checklist: badge returned, account disabled, access revoked. But the API key someone created three years ago for a short-lived project is probably still active, and3 min read·securityland.hashnode.dev
SShomil Bansal·Nov 1Modernising Enterprise Authentication: Integrating Oracle Access Manager, Keycloak and Microsoft Entra IDAn enterprise case study on modernising legacy application authentication using Oracle Access Manager, Keycloak and Microsoft Entra ID MFA.17 min read·shomilbansal.hashnode.dev1
SSandeep Gautam·Oct 31Your Landing Zone Is Your Governance Model — Design It Wrong and Everything BreaksAccount hierarchy defines blast radius. Identity defines authority. Inheritance enforces control. Everything else is decoration.17 min read·sandeepgautam.cloud2
ZZero Trust Threads·Oct 26Why Shared Accounts Make Security Harder Than It Needs to BeLearn why shared accounts weaken accountability, complicate offboarding, reduce log value, and make access control harder to manage.5 min read·zerotrustthreads.hashnode.dev
ZZero Trust Threads·Oct 26What Multi-Factor Authentication Actually Protects You FromLearn what multi-factor authentication protects against, why MFA methods differ, and how phishing-resistant MFA and passkeys improve security.6 min read·zerotrustthreads.hashnode.dev
ZZero Trust Threads·Oct 26Passwords Aren’t Dead, but They Shouldn’t Be Working AloneLearn modern password security, including length, reuse, password managers, MFA, passkeys, and why passwords should not work alone.6 min read·zerotrustthreads.hashnode.dev
SShomil Bansal·Oct 25Assessing Oracle LDAP Security Exposure: Why CVE Applicability and Internet Reachability Are Different QuestionsWhat a critical vulnerability means for business risk, identity infrastructure and remediation decisions. Introduction When a critical security vulnerability is announced, the first question from busi9 min read·shomilbansal.hashnode.dev1
SShomil Bansal·Oct 18Upgrading Oracle Internet Directory from 12c to 14c: An Enterprise Upgrade Case StudyReal-world Oracle Internet Directory 12c to 14c upgrade experience covering Java 21, repository schemas, WebLogic and LDAP troubleshooting.11 min read·shomilbansal.hashnode.dev1
KKazem Mortazavi·Oct 17Privileged Accounts: The Smallest Weak Point That Can Take Down a NetworkMost major cyber incidents follow a familiar path. An attacker gets in through something small, such as a phishing email or a minor vulnerability, but the real target is an account with high privilege3 min read·securityland.hashnode.dev
MMihai_LeanZero·Oct 3Identity is the hard half of a Data Center migration. Cloud to Cloud hands it to you and charges you for the gaps instead.DC to Cloud pays for identity. Cloud to Cloud gets identity free and a copy tool, then pays for what the tool leaves behind. What to build for each.11 min read·leanzero.hashnode.dev
