Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

A “set menu” or “à la carte” design? Drawing on nearly 12 years of experience using Identity Manager by One Identity, Andrew Edney, a lead consultant at iC Consult, gives a lightning-quick breakdown of useful UI customization options using Designer, including changes to overview forms and updating navigation with features like custom filtering.

One Identity Global Strategist Rob Kraczek breaks down how One Identity solutions let you extend your governance model to Microsoft ecosystems without sacrificing capability, creating a unified approach for governing all your directories.

An AI orchestration harness called SecFlow told itself an exploit had worked—then burned 27 follow-on tasks on a foothold that never existed. Listen to Ep.

Isolation is not the same thing as security. Ron Ben Yizhak from SafeBreach Labs presented this research at Black Hat USA and DEF CON: when Microsoft shipped Python in Excel, the code didn't run on a machine. It ran in an isolated container in Azure. So he asked the obvious question. How isolated is it, really? An isolated environment still has an attack surface. It just moves. See how Ron: If your teams are evaluating cloud-executed code features, this one is worth the full read—the methodology matters as much as the findings.

Vulnerability and compliance scans just got faster with Tanium's new scan engine. Today we're digging into Tanium Scan Engine 7.0, a rebuild of Comply scanning that moves enumeration onto Tanium Index instead of scanning live every time. The result: faster scans, lower resource usage, and one less dependency to worry about (goodbye, JRE!!).

On this episode of Masters of Data, we dig into what we're calling the tokenpocalypse, the real cost of running AI at the scale most of us have quietly slid into. We trace the whiplash of the past two years, from "everyone needs the AI hammer" to backlash against obvious AI slop, then get into the harder question of what happens when a mission-critical process runs out of tokens, from chaining Claude to Databricks for a custom dashboard to the eye-watering budget Uber reportedly burned through by April.

This week’s briefing covers: Dive deeper.

Secrets migrated from private repos to developer endpoints. Attackers no longer hack access. They log in with stolen credentials and move laterally. Dan Nguyen-Huu, Partner at Decibel Partners, explains what the shift means for defenders and where innovation is headed. "The endpoint is largely going to become one of the big new battlegrounds. I think there's also going to be new innovation on the endpoint as it pertains to new companies, maybe trying to think about DLP in a different way.".

Watch Joey Melo, Principal Security Researcher at CrowdStrike, take on AI Unlocked: Agents of Chaos and see how he approaches the challenges, manipulates autonomous AI agents and works his way through the game. Now it’s your turn. All three acts are open, with increasingly difficult challenges waiting. Put your skills to the test, climb the global leaderboard and compete for a share of up to $100,000 in cash prizes.*

HIPAA compliance becomes considerably more complicated when a stolen healthcare laptop may contain patient information. Keeping protected health information away from local storage changes the consequences of device theft and reduces the endpoint’s exposure.