IDOR Vulnerabilities Explained: Why They Persist in Modern Applications

Insecure Direct Object References, commonly referred to as IDORs, remain one of the most common and damaging classes of application vulnerabilities. Despite being well documented and widely understood at a conceptual level, they continue to appear in real production systems, particularly in modern, API-driven applications.

The CEO's Take: Making Security Work

“In 2024, at least 35.5% of all data breaches originated from third-party compromises.” Join Aleksandr Yampolskiy (CEO & Co-Founder, SecurityScorecard) and Nick Schneider (President & CEO, Arctic Wolf) for this discussion on: SecurityScorecard monitors and scores over 12 million companies worldwide.

Free ESXi: Restrictions and Limitations

VMware is a market leader in virtualization solutions, and VMware ESXi is a renowned type 1 hypervisor. Increasingly, individual users and organizations are deploying ESXi servers in their environments to run virtual machines. An ESXi hypervisor is provided as part of VMware vSphere, which, in turn, comes with different licensing options for each edition. Each VMware vSphere edition has its own price, but VMware also provides a free version of ESXi.

Leveraging backup-as-a-service (BaaS) for Microsoft 365

Summary Microsoft 365 is the operational backbone for email, collaboration, and business data, but it does not provide true backup — only availability and short-term retention. Once retention windows expire, deleted or compromised data may be unrecoverable, creating significant risk for organizations. Backup-as-a-service (BaaS) for Microsoft 365 closes this protection gap by delivering independent, point-in-time backups, granular recovery, and long-term retention.

Work Life Boundaries in the 2025 Security Year in Review

The 2025 review closes with a look at boundaries, where work still sits at the centre of life for many in cybersecurity. Flipping that script, so family, health and friends hold the core and work fits around them, offers one of the strongest answers to long term stress and burnout in security.

Single-Tenant vs Multi-Tenant FedRAMP Deployments

Across the ecosystem of federal contractors, a majority of deployments tend to be relatively standard. 80% of them will be FedRAMP impact level Moderate, for example, and most will have a standard set of considerations and concerns, such that a lot of security controls can be automated. It’s those outliers that make FedRAMP challenging.

Why compliance breaks at scale and what modern AppSec looks like

Compliance once lived on a calendar. Teams prepared for it in advance, reviewed it periodically, and treated it as a milestone separate from engineering work. That model no longer holds. Mobile applications now ship continuously. Features move weekly. Fixes land daily. Every change, no matter how small, alters the security and privacy posture of the organization. In this environment, compliance cannot trail development. It has to move with it, embedded into how software is built, tested, and released.

PunchOut Integration with Shopify: Everything You Need To Know

B2B buyers today expect corporate procurement to feel as seamless as shopping online on any modern ecommerce store, but with the higher control, stronger compliance, and streamlined approval workflows their companies require. They don’t want to toggle between supplier websites, manually handle product details, or deal with pricing inconsistencies.