Information Security
IAM and PAM: Stopping Privilege Creep and Ensuring Secure Off-boarding
How to build a controlled identity lifecycle, implement regular access reviews, and eliminate "orphaned" access vulnerab...
// archive
IAM
Glossary
What this tag means
IAM (Identity and Access Management) covers the processes and tools for managing digital identities, roles, authentication and access rights.
Information Security
Offboarding in 24 hours: securing access across IAM, VPN, SaaS, and service accounts
A practical guide for CISOs and IT administrators on turning employee termination into a controlled security process wit...
Information Security
Zero Trust for Hybrid Infrastructure: Where the Network Perimeter No Longer Works
The transition to hybrid infrastructures has rendered the traditional network perimeter obsolete. Oleh Kravchenko explai...
Information Security
From compliance to proactive cybersecurity for the public sector
CERT-UA warns of the activation of UAC-0057 with new tools OYSTERFRESH, OYSTERSHUCK, and OYSTERBLUES, requiring public o...
Information Security
Oracle PeopleSoft vulnerability exploited in university data breach
A critical zero-day vulnerability, CVE-2026-35273, in Oracle PeopleSoft has been exploited by the ShinyHunters group to ...
Information Security
CERT-UA: New UAC-0057 Toolkit and Countermeasures
CERT-UA has reported on new tooling used by the UAC-0057 group. We examine the technical aspects of OYSTERFRESH, OYSTERS...
Information Security
Microsoft 365 Token Theft on Android: Lessons for Zero Trust and NIS2 Compliance
A vulnerability in Microsoft 365 Android apps allows account token theft via a residual debug flag, necessitating immedi...
Information Security
Cyber threats to critical infrastructure: defending against new attacker tactics
CERT-UA warns of intensified cyberattacks targeting critical infrastructure. We examine new attacker tactics and effecti...
Information Security
Supply chain security lessons for AI integrations
The Miasma attack on Red Hat's npm packages highlights supply chain risks and credential theft, which are critical for A...
Information Security
AI security platform: protecting AI services from prompt injection and data leaks
Protecting AI services from prompt injection and data leaks in 2026 requires a comprehensive approach and integration wi...
Process Automation
Industrial IoT and SCADA: Key Trends for 2026
Industrial IoT and SCADA systems are transforming manufacturing. We examine the key trends for 2026: AI, cybersecurity, ...
Information Security
AI drives compliance audit automation
AI-driven compliance is transforming ISO/IEC 27001 and SOC 2 audits by automating evidence collection and non-compliance...