Tag: zero trust
141 articles
IonQ Bolsters Cybersecurity with $1.3 Billion Elisity Acquisition
IonQ is supercharging its cybersecurity game with the acquisition of Elisity, a cutting-edge zero-trust network security firm, in a whopping $1.3 billion all-stock deal. This strategic move is a direct response to the rapidly approaching Q-Day threat, with Elisity's innovative access-control capabilities set to turbocharge IonQ's cybersecurity arm.
US Army Wrestles with Zero Trust Identity Challenge
The US Army faces a daunting task: folding 5,000 disparate IT systems into a single, secure platform that verifies the identity of every connected user and device, a crucial step towards achieving Zero Trust Identity by 2027. To get there, they're developing flexible onboarding pathways to bring all systems under one roof.
Cybersecurity Shifts to Continuous Risk Response
The future of cybersecurity lies in agility, not data overload - it's about harnessing the power of your security data to respond to threats in real-time. Winning security programs will be those that can swiftly route, reshape, and reuse data to stay ahead of emerging risks.
Zero Trust Vulnerable to Onboarding Attacks
The often-overlooked onboarding process is a glaring weak spot in Zero Trust security, leaving companies vulnerable to attacks that exploit the "Day One window" when new hires are first brought into the environment. Stolen credentials, involved in nearly 45% of breaches, can easily be stolen during this chaotic period when service desk agents are busy activating accounts and issuing initial credentials.
AI Coworkers Expose New Security Risks
Meet the new security challenge: AI coworkers that operate on borrowed credentials with no owner and no off switch, posing a risk that threatens to upend traditional access governance. As AI agents become more autonomous and persistent, they require robust provisioning and lifecycle controls to prevent a security nightmare.
Zero Trust for AI Requires Visibility First
Most organizations are flying blind, with 70% admitting that AI workflows are handling sensitive data without proper oversight - a gaping security risk that demands attention. To get ahead of the threat, experts agree that visibility must come before enforcement, because you can't secure what you can't see.
Identity Infrastructure Exposes Hidden Risks in Active Directory
In today's cybersecurity landscape, identity has become the new perimeter - and Active Directory and Entra ID are the control centers that keep it all connected, making them prime targets for attackers. Compromising these identity infrastructures can give hackers access to an entire environment, not just a single system.
Identity Visibility Emerges as Critical IAM Challenge
In today's digital landscape, identity visibility has become a pressing challenge for modern enterprises, requiring a clear view of every identity, its access capabilities, and actual usage. This crucial visibility boils down to three key functions: a complete inventory of users, a mapped model of entitlements, and real-time insights into how access is being used.
CISA Promotes Decoys to Detect Breaches
Want to catch cyber attackers in the act? Planting decoy files, accounts, and credentials inside your network can expose machine-driven threats and help you detect breaches before they cause harm.
Public Sector Braces for Identity-Based Attacks
In today's digital landscape, your identity is the key that unlocks access to all your applications and services - making it the new perimeter that public sector organizations must fiercely protect. When identity infrastructure is compromised, attackers can gain a foothold for long-term persistence and privilege escalation, putting entire operations at risk.
Surfshark VPN Breach Exposes Internal Test Servers
A configuration mistake made by Surfshark's engineering team left an internal test server vulnerable to the internet, exposing sensitive data due to human error. The incident highlights the importance of robust security measures, even for trusted services.
AI Coding Agents Expose Corporate Networks to Untrusted Code
The alarming truth is that AI coding agents are unwittingly putting corporate networks at risk by blindly trusting untrusted code, leaving them vulnerable to security breaches. Thousands of agent manifest files have already been uncovered in a wide scan of corporate domains, exposing a massive supply-chain surface that's not adequately protected.
DoD Accelerates Zero Trust Push Beyond Users, Devices
The Pentagon is making swift strides in implementing Zero Trust principles for its IT systems, focusing on users and devices, and is now poised to take this momentum to the next level. A upcoming webinar will assess progress and explore the future of Zero Trust across the Department of Defense.
Identity Attacks Expose Gaps in APAC's Cyber Defenses
Cyberattacks are wreaking havoc in APAC, with identity infrastructure compromises capable of crippling an organisation's ability to operate, and recovery timelines often stretching to weeks. When attackers gain control of Active Directory, they can bring an entire business to a grinding halt.
Identity Takes Center Stage in Cybersecurity as Threats Evolve
In today's evolving threat landscape, protecting identity has become the top priority in cybersecurity - treat it like the crown jewels, because it is. By prioritizing identity protection and having a plan in place to recover quickly, organizations can safeguard the foundation of every mission.
Zero Trust Bolsters Critical Infrastructure Against Identity Threats
A single compromised account, like the inactive VPN login used to breach Colonial Pipeline in 2021, can have devastating ripple effects - just imagine a national crisis triggered by a simple vulnerability. The Colonial Pipeline ransomware attack is a stark reminder of the catastrophic consequences that can unfold when critical infrastructure is compromised.
Private 5G Networks Expose Government to Hidden Security Risks
Government agencies and military organizations risk exposing themselves to hidden security threats if they don't adopt a zero-trust approach to their private 5G networks, leaving them vulnerable to potentially devastating attacks. Without proper security measures in place, adversaries could gain unrestricted access to sensitive information and wreak havoc.
Agencies Modernize Identity Infrastructure to Counter Emerging Threats
Federal agencies are racing against the clock to modernize their identity infrastructure, securing legacy systems while navigating the rapid evolution of AI and emerging post-quantum threats. As AI continues to advance at breakneck speed, agencies must build adaptable cybersecurity strategies to stay ahead of the threat landscape.
SASE Struggles to Keep Pace with AI-Driven Workflow Shifts
As enterprises shift to AI-driven workflows, their security teams struggle to keep up, risking loss of visibility as data interactions move beyond traditional network boundaries. With modern protocols like TLS 1.3 and HTTP/3 blocking interception, outdated SASE architectures are failing to keep pace.
FIFA Exposes Vulnerability in Application Backends
A shocking vulnerability was discovered in the backends of two FIFA applications, Football Data Platform and Commentator Information System, where authorization checks were surprisingly handled by client-side code, leaving them open to potential exploitation. This flaw highlights a critical error in application design, where security checks were outsourced to the user interface, rather than being rigorously enforced on the server-side.
NSA, CISA Warn Federal Agencies of Identity Security Risks
The NSA and CISA are sounding the alarm: identity security risks are now the frontline in federal cybersecurity, with Active Directory and Entra ID being prime targets for cyber attackers. Recent incidents show that nearly 75% of major federal cyber breaches in the last five years involved compromised identities.
Credentials Face Quantum Threat Decades Ahead
The NSA has set a critical deadline: by January 1, 2027, new national security systems must support quantum-resistant algorithms to stay ahead of emerging threats. With deadlines stretching into the 2030s, organizations must plan now to protect their systems from the looming quantum threat.
CISA Guides Agencies Toward SASE for Zero Trust Adoption
CISA's new guidance is helping federal agencies ditch outdated internet gateways and make the leap to Secure Access Service Edge (SASE) technology, a key step towards adopting zero-trust architectures. By making this shift, agencies can unlock the benefits of zero-trust security and leave legacy perimeter-based models behind.
Identity Visibility Platforms Shrink IAM Attack Surface
Nearly half of all identity activity in enterprises remains invisible to centralized identity and access management, creating a hidden risk that can leave organizations vulnerable to attacks. This "Identity Dark Matter" emerges as identities multiply across apps, teams, and systems, outpacing the ability of security teams to keep control.