TOTushar Openiaminopeniam.hashnode.dev·2d ago · 7 min readThe Access Review Your Auditor Cannot Rely OnThe quarterly access certification campaign closed on schedule. Every item on the list received a decision. The completion rate was 100%. The records are filed. Then the auditor asks a follow-up quest00
ZTZero Trust Threadsinzerotrustthreads.hashnode.dev·4d ago · 5 min readAuthentication vs. Authorization: Why the Difference MattersYou sign into an application. You enter your username. You provide your password or another authenticator. The application accepts it. Now you are logged in. Does that mean you should have access to e00
BTBiz tech pulse hubinbiztechpulsehub.hashnode.dev·6d ago · 1 min readThe Dangerous Access Paths Hidden Across Your Corporate Identity Network Your corporate identity environment can look secure while highly privileged access leaks stay completely unmonitored across hybrid databases. A former contract employee may still hold an active softwa00
ZTZero Trust Threadsinzerotrustthreads.hashnode.dev·Aug 22 · 5 min readZero Trust Explained Without the Buzzword SoupIf you've spent any time around cybersecurity, you've probably heard the phrase: “Never trust, always verify.” It sounds good. It also sounds like something designed to make a conference slide look 10
4F404 Foundersin404-founders.com·Aug 18 · 5 min readFrance’s Education Ministry Investigates a New Student Data Theft ClaimThe new claim reaches far beyond the July staff breach France’s Ministry of Education is investigating a fresh claim that personal data on students and teachers was stolen from its systems. The claim 00
Rrathsarainrr-cyber.hashnode.dev·Aug 6 · 15 min readIdentity Foundations: Everything Before OAuthBefore any protocol makes sense on its own terms, a few things underneath it need to be settled first: what authentication and authorization actually are as distinct concepts, how identity gets carrie13N
Rrathsarainrr-cyber.hashnode.dev·Aug 5 · 9 min readIdentity Was the Gap I Did Not Know I HadI had worked across cloud security engineering, vulnerability assessment, penetration testing, and application security. I had reviewed IAM configurations across multiple cloud platforms, flagged over11N
MSManu Shuklainecorpit.hashnode.dev·Aug 4 · 18 min readBlock device-code phishing in 2026: the Entra ID, Okta, GitHub and Google Workspace settingsBlock device-code phishing in 2026: the Entra ID, Okta, GitHub and Google Workspace settings Summary. Device-code phishing abuses the OAuth 2.0 device authorization grant to steal access tokens, and i00
BRBen Robertsinbenroberts.io·Jul 13 · 12 min readJust-In-Time Privilege Elevation for Windows Server 2025 dMSAsWe've all lived through the incident. A critical production deployment goes sideways, the platform engineering team scrambles, they hit the JIT access portal, swipe through MFA, and within thirty seco00
MMikuzinmikuz.hashnode.dev·Jun 26 · 4 min readIdentity Security Mistakes That Leave Microsoft Environments ExposedAs organizations continue adopting hybrid identity infrastructures, attackers are increasingly targeting identity systems instead of traditional network perimeters. A single compromised administrator 00
