Writing
Page 5 of 26.
Machine identities now outnumber humans by 45 to 1 or more, and every AI agent widens the gap. Here is what an identity orchestration layer is, in plain terms, and how to build one that governs humans, workloads, and agents from a single control plane.
About two dozen AI crawlers matter in 2026. They split into three classes, and your security team has blocked several without telling marketing.
Eight out of ten cold emails now describe my company correctly. Eighteen months ago it was three. Nobody ran a rebrand.
Four serious CNAPP platforms, four different philosophies: agentless graphs, runtime detection, container lifecycle, and all-in-one breadth. Here is how to choose.
Both centralize secrets and kill the .env-file-in-Slack habit. The real fork is open-source and self-hosted versus a managed SaaS you never operate.
Both are free, fast, and encrypted. The real differences are what they block, what they log, and whose laws govern the servers.
Passkeys, post-quantum crypto, silent network authentication, AI behavioral biometrics, and decentralized identity are fusing into one login stack. Here is what it looks like by 2030, and the two moves in 2026 that decide whether you are ready.
Reddit, USA Today and Reuters are weighing whether to cut Google off. Most of the numbers from that story were corrected a day later. What the breaking crawl bargain means for B2B SaaS, and why blocking is a negotiating position rather than a plan.
ShinyHunters claimed 2.2M Kodak records with a June 18 leak deadline. The group has breached Snowflake, Salesforce, Canvas, PeopleSoft, and now Kodak.
One phished BPO agent extracted 13M Adobe customer records and unpublished vulnerability reports from HackerOne. Third-party access is the breach pattern of 2026.
Iranian hackers wiped tens of thousands of Stryker devices in one attack. No data stolen. Just destruction. A new phase in state-sponsored cyber warfare.
LinkedIn says GEO is a grift. Corporate job boards say it is a salary band up to $171K at Stripe, SailPoint, AWS, and Citizens Bank. I break down what these companies actually hire for, and why this looks exactly like the cloud and email revolutions did fifteen years ago.
Every CTO re-litigates build vs buy for authentication every 18 months, and the framing is broken. The real question isn't build or buy. It's which parts of identity are commodity and which parts are your actual product.
Novo Nordisk confirmed a June 2026 data breach. The pharmaceutical giant behind Ozempic becomes the latest healthcare target in an accelerating trend.
On Space Exploration Day, the moon landing is a founder's lesson in sequencing: commit to the outcome before you have proof it is reachable, and build the proof on the way.
74,000 Fortinet admin credentials cracked by GPU clusters from config backups stolen via old vulnerabilities. Patching the device wasn't enough.
ShinyHunters breached Canvas LMS through a free teacher account flaw. Instructure paid the ransom. Data was already copied. 275M student records exposed.
Identity vendors rarely die of bankruptcy. They die of acquisition, then neglect, then a shutdown email. A complete history of every dead CIAM vendor, the pattern behind the deaths, and the questions that protect you from the next one.
France banned Signal for government use and built Tchap. A hacker stole 73K accounts, 643K messages, and 59K media files from French ministry conversations.
It is AI Appreciation Day. From an operator's seat, here is what AI actually changed: it collapsed the distance between an idea and a shipped product, and rewrote how customers discover companies.
On World Youth Skills Day, the advice that runs against the usual: stop future-proofing a single skill. The durable skill is learning a new one fast, under pressure.
24 billion stolen credentials in one database. 8.3TB of plaintext passwords and login URLs harvested by infostealers. The credential economy has scaled.
Whether Auth0 is too expensive depends entirely on who's asking. A framework for telling the regulated enterprise buyer (pay and negotiate) apart from the high-volume, cost-sensitive platform (migrate), with 2026 pricing and breach-cost data.
ShinyHunters weaponized a PeopleSoft zero-day to breach 100+ organizations in two weeks. 455K student records at Nottingham alone. Oracle's advisory came last.
ServiceNow shipped a REST endpoint with authentication disabled. Attackers queried customer data without credentials. The company knew since April.
The structured data that gets cybersecurity vendors cited by AI: five JSON-LD schema types, plus how to reference CVEs, MITRE ATT&CK techniques, and NIST controls as extractable entities.
Scaling a CIAM platform past a billion users taught me that customer identity is a trust problem: progressive profiling, risk-based auth, and passwordless done right.
Traditional vulnerability cycles take months from discovery to patch. AI compresses that to hours. CrowdStrike reports 29-minute breakout times and 89% more AI-augmented attacks year-over-year.
MCP concentrates every AI-agent-to-tool interaction through one interface, and that makes it a new attack surface. A breakdown of the vulnerabilities and how to secure them.
Marketing says GEO is theirs. Comms says it belongs to them. SEO assumes it's the next chapter of their job. They're all partly right, and the fight itself is the symptom of a deeper confusion: GEO spans layers no single team owns. Here is a model that resolves it.
