SSandeep Gautam4h ago · 17 min readYour Landing Zone Is Your Governance Model — Design It Wrong and Everything BreaksTLDR A cloud landing zone is not infrastructure plumbing. It is your governance model, compiled into architecture — and it will outlive every strategy document, operating model review, and reorganisatsandeepgautam.cloud
ZZero Trust Threads4d ago · 5 min readWhy Shared Accounts Make Security Harder Than It Needs to BeThe Problem with Shared Accounts A team needs access to a system. Someone creates: admin Then everyone uses it. Simple. Convenient. And now nobody knows who actually did anything. Shared accounts can zerotrustthreads.hashnode.dev
ZZero Trust Threads4d ago · 6 min readWhat Multi-Factor Authentication Actually Protects You FromUnderstanding Multi-Factor Authentication You enter your password. Then the website asks for something else. Maybe a code. Maybe a push notification. Maybe a security key. Maybe a passkey. That secondzerotrustthreads.hashnode.dev
ZZero Trust Threads4d ago · 6 min readPasswords Aren’t Dead, but They Shouldn’t Be Working AlonePasswords have been declared dead for years. And yet here we are. You still use them. Websites still ask for them. Companies still manage them. Attackers still steal them. Passwords are not disappearizerotrustthreads.hashnode.dev
SShomil Bansal6d ago · 9 min readAssessing Oracle LDAP Security Exposure: Why CVE Applicability and Internet Reachability Are Different QuestionsWhat a critical vulnerability means for business risk, identity infrastructure and remediation decisions. Introduction When a critical security vulnerability is announced, the first question from busishomilbansal.hashnode.dev
SShomil BansalOct 18 · 11 min readUpgrading Oracle Internet Directory from 12c to 14c: An Enterprise Upgrade Case StudyPractical lessons in upgrade readiness, Java compatibility, repository schema upgrades, WebLogic reconfiguration and LDAP validation. Introduction Upgrading Oracle Internet Directory (OID) is more comshomilbansal.hashnode.dev
KKazem MortazaviOct 17 · 3 min readPrivileged Accounts: The Smallest Weak Point That Can Take Down a NetworkMost major cyber incidents follow a familiar path. An attacker gets in through something small, such as a phishing email or a minor vulnerability, but the real target is an account with high privilegesecurityland.hashnode.dev
MMihai_LeanZeroOct 3 · 11 min readIdentity is the hard half of a Data Center migration. Cloud to Cloud hands it to you and charges you for the gaps instead.Identity is the hard half of a Data Center migration. Cloud to Cloud hands it to you and charges you for the gaps instead. Key takeaways DC to Cloud: identity is the expensive half. username and userleanzero.hashnode.dev
MMihai_LeanZeroOct 3 · 17 min readAtlassian Cloud Architecture: Organization, Site, Product, and What a Migration CrossesAtlassian Cloud Architecture: Organization, Site, Product, and What a Migration Crosses Key takeaways An organization sits above one or more sites; a site holds one product instance each; a directoryleanzero.hashnode.dev
KKarim El JamaliSep 23 · 12 min readCross-App Access: How an AI Agent Reaches an MCP Server It Doesn't Own Hooking an AI agent up to an MCP server is easy when you own both ends. It gets messier when the agent is yours, your users sign in through your company's Okta, and the MCP server belongs to someone ejamali.hashnode.dev