Identity

CISA’s incident shows why the visible secret is only the start of revocation

The risk between expected and unexpected inputs

Route exposed two different meanings for the word "permission"

The scanner still produced its expected result after the theft had occurred

A medical-technology disruption, invisible code and manufactured streams each defeated a different kind of trust

GRIDTIDE used a sanctioned cloud API for an illegitimate workload

The OpenClaw flaw and an Ollama scan exposed the limits of “local”

OpenAI's update showed why browser agents need limits beyond just the model

A new control plane, an Australian testing institute and a supplier breach all made assurance more concrete

What happens when findings come faster than the decision to fix them?

The campaign showed why connected apps deserve the same scrutiny as user accounts