←All topics

cloud-security

3 pieces of writing

security13 min read

Tycoon 2FA against Entra ID and Google Workspace: MFA bypass and authentication assumptions under fire

Tycoon 2FA AiTM attacks against Entra ID and Google Workspace show why MFA cannot carry identity assurance alone when session theft, proxy phishing and degraded controls sit in the path after login.

Stryker lost tens of thousands of devices without a single piece of malware
cloud-security9 min read

Stryker lost tens of thousands of devices without a single piece of malware

Non-human identities outnumber humans 45 to 1 in cloud environments and most have no monitoring at all
cloud-security10 min read

Non-human identities outnumber humans 45 to 1 in cloud environments and most have no monitoring at all