2FAEmail hijacking via OAuth
How attackers gain access to corporate services without stealing passwords or cookies: we’re analyzing the Shadow Token via Remote Debug technique used in ToddyCat APT attacks.
identity security
7 articles
passkeysEnterprise passkey adoptions: nuances and challenges
We dive into which corporate systems support passkeys, where compatibility falls short, and why we probably won’t be saying goodbye to passwords anytime soon.
Migration to zero trust in practice – including the pitfalls
How organizations implement zero-trust principles, and what CISOs advise for project success.
How the adversary-in-the-middle technique is used in spearphishing attacks
Cybercriminals are using AitM techniques to compromise accounts of company executives. How do they do this, and how to protect against it?
passwordsSecuring cloud providers’ SSO
Single sign-on is supposed to enhance corporate security, but it’s essential that cloud vendors have the information security team’s back.
The security aspect of employee offboarding
Offboarded employees often retain access to work information. What are the risks, and how to deal with them?
Identity security: what is it, and why is it helpful?
Proper account security not only reduces the number of cyberattacks on companies — it brings financial benefits too. What needs to be done to reap them?