Tag

#identity-security

31 posts0 followers

Explore Hashnode

Alternatives

Least Privilege Sounds Simple Until You Have to Implement It

The Challenge of Least Privilege The principle sounds easy: Give people only the access they need. Done. Cybersecurity solved. Except the phrase "only the access they need" hides most of the difficult

zerotrustthreads.hashnode.dev

Zero Trust Threads5d ago · 5 min read

Service Accounts: The Accounts Nobody Notices Until Something Breaks

Managing Service Accounts Not every account belongs to a human. Applications need identities too. Services need to authenticate. Scheduled jobs need access. Automation needs permissions. Databases nee

zerotrustthreads.hashnode.dev

Hazel ChirindaOct 23 · 11 min read

When a Password Is Not Enough: Understanding Identity-Based Attacks

In cybersecurity, we often focus on protecting devices, detecting malware, and preventing suspicious files from executing. But there is another area that deserves just as much attention: identity secu

hazelsec.hashnode.dev

Zero Trust ThreadsOct 9 · 8 min read

Temporary Access Has a Way of Becoming Permanent

Some of the most dangerous words in technology are: "Just for now." Just give me administrator access for today. Open that firewall rule temporarily. Leave the test account enabled until the migrati

zerotrustthreads.hashnode.dev

Adeshina EmmanuelSep 13 · 7 min read

How AWS Actually Evaluates IAM Policies (Identity vs Resource)

Cloud Identity Security Engineering · #002Enterprise Reference Note The Core Question What is the precise evaluation order and interaction model between identity-based policies and resource-based pol

eadeshina.hashnode.dev

Yury ButuzovSep 10 · 10 min read

The Anatomy of Exposure: Why the Market Cannot Agree on What Counts as One

15,000 exposures, fewer than one per cent of them CVEs In May 2024, XM Cyber and the Cyentia Institute estimated that a typical organisation had about 15,000 exposures. Fewer than one per cent were vu

yurybutuzov.hashnode.dev

Tushar OpeniamSep 10 · 7 min read

The Access Review Your Auditor Cannot Rely On

The quarterly access certification campaign closed on schedule. Every item on the list received a decision. The completion rate was 100%. The records are filed. Then the auditor asks a follow-up quest

openiam.hashnode.dev

Zero Trust ThreadsSep 7 · 5 min read

Authentication vs. Authorization: Why the Difference Matters

You sign into an application. You enter your username. You provide your password or another authenticator. The application accepts it. Now you are logged in. Does that mean you should have access to e

zerotrustthreads.hashnode.dev

Biz tech pulse hubSep 6 · 1 min read

The Dangerous Access Paths Hidden Across Your Corporate Identity Network

Your corporate identity environment can look secure while highly privileged access leaks stay completely unmonitored across hybrid databases. A former contract employee may still hold an active softwa

biztechpulsehub.hashnode.dev

Zero Trust ThreadsAug 22 · 5 min read

Zero Trust Explained Without the Buzzword Soup

If you've spent any time around cybersecurity, you've probably heard the phrase: “Never trust, always verify.” It sounds good. It also sounds like something designed to make a conference slide look

zerotrustthreads.hashnode.dev

Search Hashnode

Explore Hashnode

Trending tags this week

Least Privilege Sounds Simple Until You Have to Implement It

Service Accounts: The Accounts Nobody Notices Until Something Breaks

When a Password Is Not Enough: Understanding Identity-Based Attacks

Temporary Access Has a Way of Becoming Permanent

How AWS Actually Evaluates IAM Policies (Identity vs Resource)

The Anatomy of Exposure: Why the Market Cannot Agree on What Counts as One

The Access Review Your Auditor Cannot Rely On

Authentication vs. Authorization: Why the Difference Matters

The Dangerous Access Paths Hidden Across Your Corporate Identity Network

Zero Trust Explained Without the Buzzword Soup