All posts
Topic · 14 articles
Identity security: account takeover, NHI and MFA
Identity security protects the accounts, tokens and keys that grant access, human and non-human, because most breaches now start with a stolen login. These articles cover account takeover, MFA that resists phishing, machine identities and how to respond when an identity is compromised.
Put it into practice
Guides and explainers (13)
Identity Compromise Response Plan: The First Hour After a Stolen Login
What to do when an account is compromised: revoke sessions and tokens, not just the password; remove attacker MFA and app access; work out what the identity could reach; and hunt for the persistence attackers leave behind.
October 29, 2026
GitHub Supply-Chain Attack: Anatomy and Controls (Oct 2026)
The October 2026 LiteLLM GitHub-identity compromise, as publicly reported, broke down step by step — and the specific, boring GitHub control that would have ended the chain at each point. Plus nine free, in-browser tools to check your own setup.
October 24, 2026
Azure Workload Identity vs Managed Identity (AKS)
Kubernetes workload identity on AKS, EKS and GKE explained, plus Azure workload identity vs managed identity: a side-by-side table and when to use each.
October 7, 2026
Advantages of FIDO2 and Passkeys for the Workforce
FIDO2 and passkeys give the workforce phishing-resistant sign-in that is also faster and easier than passwords. The security, productivity and cost benefits, and how to realise them.
September 26, 2026
CISA Zero Trust Maturity Model (ZTMM) Explained
CISA’s Zero Trust Maturity Model maps the journey across five pillars and four stages. What each pillar and stage means, and how to assess where you sit.
September 26, 2026
Free Breach-Lookup APIs for Security Teams, Explained
Breach-lookup APIs let you check whether an email, domain or password has appeared in a known data breach. What the free options can and cannot do, safe ways to use them, and where they fit.
September 26, 2026
NIS2 Compliance with FIDO2: Article 21 Mapping
NIS2 doesn't name FIDO2, but Article 21 requires MFA where appropriate, and FIDO2 passkeys and security keys meet its phishing-resistant end. Rollout order.
September 26, 2026
FIDO2 Keys for DORA Compliance: What DORA Requires
DORA does not mandate FIDO2, but requires strong authentication and robust IAM. FIDO2 hardware keys support that for privileged access to financial systems.
September 26, 2026
AI Agent Governance & Security Plane: Reference Architecture
A reference architecture for the three unsolved problems of deploying AI agents at scale: identity (zero standing privilege), security (runtime guardrails plus a quarantine path), and observability (trace-first debugging). Nine components, explained — plus an interactive tool to self-score your own environment.
September 15, 2026
Help Desk Security: Defending Against Social Engineering
How attackers weaponize the help desk with vishing and reset fraud, and the caller-verification, policy, and monitoring controls that stop account-takeover at the support desk.
September 2, 2026
High-Risk User Warning Signs: A Checklist
Who counts as a high-risk user, the warning signs that someone needs extra protection, and the additional controls to apply to executives, administrators, and finance staff.
August 25, 2026
Authenticator App Security Hygiene
How to use TOTP and push-based authenticator apps safely: backups and recovery, resisting MFA fatigue and phishing, and what to do when a device is lost or replaced.
August 19, 2026
FIDO2 and Passkeys: Benefits, Options, and How to Assess Them
A practical guide to phishing-resistant authentication: what FIDO2 and passkeys are, the difference between security keys and device-bound passkeys, and how to assess readiness before you roll them out.
August 14, 2026