Point-in-time audits and sampled assessments offer only snapshots; continuous control monitoring provides evidence that security controls are working today. (Sravish Sridhar)

Every leaked credential should be dead, or dying, within sixty seconds of being found. Here's a proposal to make that the default. (Matt Honea)

Security teams must treat autonomous agents as highly privileged identities. (Etay Maor)

For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality. (Danelle Au)

Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop. (Torsten George)