Not so long ago, “supply chain security” remained largely a discussion of infrastructure teams comfortable with the fact that this is something you heard about after a major compromise, and then hung in the closet. Then came the SolarWinds incident,…
The cryptographic infrastructure that most organizations are sitting on was designed to last decades. RSA, ECC, AES – they are so old and reliable as the foundations of secure communications that they have become almost transparent. They are embedded in…
Enterprise security currently faces a silent, pressing need. Quantum computers that can break modern RSA and elliptic-curve encryption aren’t available yet. Still, the economic risk is high enough that governments, banks, and cloud providers have already started taking action. The…
Nothing is repeated here, and I would say the biggest blocker in Post-Quantum Cryptography Migration isn’t finding the right algorithm. It is neither low cost nor executive buy-in. It is that most organizations don’t know where their cryptography lives. TNO…
Today, quantum computers don’t break encryption. Nonetheless, the protocols and certificates being issued currently may still be used when they do. And that is the unpleasant reality: NIST took almost ten years to host one of the most high-traffic cryptography…
A silent countdown is occurring in the background of all the encrypted connections you are making today – in the process of each login, each bank transfer, each secure message. Most people don’t know it exists. And the ones that…
It’s a threat that is right in your encrypted archives at this very moment – and it does not have to do anything today. Enemies will soon reap encrypted information in bulk, store it latently, and bide their time. This…
Enterprise environments are undergoing a silent security crisis right now. It doesn’t make the news like ransomware, but it is spreading faster than many teams realize. Instances of AI agents- those that automatically invoke APIs, query databases, send emails, and…
Most security teams have locked down human access over the years. Multi-factor authentication, role-based access controls, quarterly review of access – the standard arsenal. Here’s the number that should make any security architect pause: organizations currently operate with 10-45 non-human…
AI agents are catching up quickly – even quicker than the security models that organizations constructed to enable the usage of humans. And the cracks are showing. Ask any security team operating an agentic workflow, and the story will be…
Most enterprise security programs are running a silent crisis under the radar. This isn’t about firewalls and phishing. It is about identity, that is, thousands of non-human identities (NHIs) that are running silently in cloud environments, SaaS architectures, CI/CD pipelines,…
In the recent past, identity security meant a strong employee password and IT’s ability to deprovision an account once the person left the firm. Clean, simple, human-shaped. The model has now failed – and the failure has occurred more quickly…