Every leaked credential should be dead, or dying, within sixty seconds of being found. Here's a proposal to make that the default. (Matt Honea)

Security teams must treat autonomous agents as highly privileged identities. (Etay Maor)

For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality. (Danelle Au)

Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop. (Torsten George)

Silent patches can become exploit intelligence for attackers while leaving defenders without the context needed to prioritize risk. (Tod Beardsley)