ZZero Trust ThreadsOct 9 · 8 min readTemporary Access Has a Way of Becoming PermanentSome of the most dangerous words in technology are: "Just for now." Just give me administrator access for today. Open that firewall rule temporarily. Leave the test account enabled until the migratizerotrustthreads.hashnode.dev
AAdeshina EmmanuelSep 13 · 7 min readHow AWS Actually Evaluates IAM Policies (Identity vs Resource)Cloud Identity Security Engineering · #002Enterprise Reference Note The Core Question What is the precise evaluation order and interaction model between identity-based policies and resource-based poleadeshina.hashnode.dev
TTushar OpeniamSep 10 · 7 min readThe Access Review Your Auditor Cannot Rely OnThe quarterly access certification campaign closed on schedule. Every item on the list received a decision. The completion rate was 100%. The records are filed. Then the auditor asks a follow-up questopeniam.hashnode.dev
ZZero Trust ThreadsSep 7 · 5 min readAuthentication vs. Authorization: Why the Difference MattersYou sign into an application. You enter your username. You provide your password or another authenticator. The application accepts it. Now you are logged in. Does that mean you should have access to ezerotrustthreads.hashnode.dev
BBiz tech pulse hubSep 6 · 1 min readThe Dangerous Access Paths Hidden Across Your Corporate Identity Network Your corporate identity environment can look secure while highly privileged access leaks stay completely unmonitored across hybrid databases. A former contract employee may still hold an active softwabiztechpulsehub.hashnode.dev
ZZero Trust ThreadsAug 22 · 5 min readZero Trust Explained Without the Buzzword SoupIf you've spent any time around cybersecurity, you've probably heard the phrase: “Never trust, always verify.” It sounds good. It also sounds like something designed to make a conference slide look 1zerotrustthreads.hashnode.dev
4404 FoundersAug 18 · 5 min readFrance’s Education Ministry Investigates a New Student Data Theft ClaimThe new claim reaches far beyond the July staff breach France’s Ministry of Education is investigating a fresh claim that personal data on students and teachers was stolen from its systems. The claim 404-founders.com
RrathsaraAug 6 · 15 min readIdentity Foundations: Everything Before OAuthBefore any protocol makes sense on its own terms, a few things underneath it need to be settled first: what authentication and authorization actually are as distinct concepts, how identity gets carrie13Nrr-cyber.hashnode.dev
RrathsaraAug 5 · 9 min readIdentity Was the Gap I Did Not Know I HadI had worked across cloud security engineering, vulnerability assessment, penetration testing, and application security. I had reviewed IAM configurations across multiple cloud platforms, flagged over31Nrr-cyber.hashnode.dev
MManu ShuklaAug 4 · 18 min readBlock device-code phishing in 2026: the Entra ID, Okta, GitHub and Google Workspace settingsBlock device-code phishing in 2026: the Entra ID, Okta, GitHub and Google Workspace settings Summary. Device-code phishing abuses the OAuth 2.0 device authorization grant to steal access tokens, and iecorpit.hashnode.dev
