SERIES: “The Death of Compliance Theater” — Part 2 of 3 Part 1 of this series made the case that a passing audit and a secure environment are two different things, answering two different questions. This post is about a specific, well-intentioned attempt to close that gap and why it mostly automated the wrong half of
Read More
SERIES: “The Death of Compliance Theater” — Part 1 of 3 In 2013, Target passed its PCI-DSS assessment. The retailer was, on paper, compliant with the payment card industry’s security standard, the same standard designed specifically to prevent exactly the kind of attack that hit it a few months later, when attackers used stolen vendor
Read More
The Zero-Friction Alternative: How Seceon aiSecurity UIDGuard360 Approaches Identity Threat Detection Across the first two posts in this series, we made the case that identity has quietly become the real perimeter, and that the four dominant approaches to defending it (kernel agents, walled gardens, governance platforms, and privileged access vaults) all tend to break down
Read More
We Looked at Four Popular Approaches to Identity Security. Here’s Why Each One Breaks Down in Production. If you’ve sat through identity security vendor pitches over the last few years, you’ve probably heard some version of the same promise: deploy this, and credential-based attacks stop being a problem. Most of those pitches aren’t lying, exactly.
Read More