Med-Mastodon

LMG SecurityNon-Human Identities: The Hidden Risk in Your StackNon-human identities (NHIs)—like API keys, service accounts, and OAuth tokens—now outnumber human accounts in many enterprises. But are you managing them securely? With 46% of organizations reporting compromises of NHI credentials just this year, it’s clear: these powerful, often-overlooked accounts are the next cybersecurity frontier.Read The Hacker News article for more details: <a href="https://thehackernews.com/2025/06/the-hidden-threat-in-your-stack-why-non.html" rel="nofollow noopener" translate="no" target="_blank">https://thehackernews.com/2025/06/the-hidden-threat-in-your-stack-why-non.html</a><a href="https://infosec.exchange/tags/IdentitySecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#IdentitySecurity</a> <a href="https://infosec.exchange/tags/CyberRisk" class="mention hashtag" rel="nofollow noopener" target="_blank">#CyberRisk</a> <a href="https://infosec.exchange/tags/APIsecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#APIsecurity</a> <a href="https://infosec.exchange/tags/NHIs" class="mention hashtag" rel="nofollow noopener" target="_blank">#NHIs</a> <a href="https://infosec.exchange/tags/DevSecOps" class="mention hashtag" rel="nofollow noopener" target="_blank">#DevSecOps</a> <a href="https://infosec.exchange/tags/IAM" class="mention hashtag" rel="nofollow noopener" target="_blank">#IAM</a> <a href="https://infosec.exchange/tags/CISO" class="mention hashtag" rel="nofollow noopener" target="_blank">#CISO</a> <a href="https://infosec.exchange/tags/Cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#Cybersecurity</a> <a href="https://infosec.exchange/tags/MachineIdentities" class="mention hashtag" rel="nofollow noopener" target="_blank">#MachineIdentities</a> <a href="https://infosec.exchange/tags/ZeroTrust" class="mention hashtag" rel="nofollow noopener" target="_blank">#ZeroTrust</a> <a href="https://infosec.exchange/tags/RiskManagement" class="mention hashtag" rel="nofollow noopener" target="_blank">#RiskManagement</a> <a href="https://infosec.exchange/tags/Infosec" class="mention hashtag" rel="nofollow noopener" target="_blank">#Infosec</a> <a href="https://infosec.exchange/tags/IT" class="mention hashtag" rel="nofollow noopener" target="_blank">#IT</a> <a href="https://infosec.exchange/tags/ITsecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#ITsecurity</a>

0x40kAlright folks, just stumbled across a report saying identity theft is *still* the biggest reason for data breaches. Crazy, right? 🤯 We're talking phishing, man-in-the-middle attacks, even getting around multi-factor authentication... it's all happening.And honestly, reacting after the fact? That's a seriously expensive headache, and often doesn't even fix the problem. Way better to have secure-by-design solutions in place – stopping those attacks before they even *start*.You know, I've always thought security needs to be baked in from the very beginning. I get that clients often want things done fast and cheap, but let's be real: security isn't just a nice-to-have. It's a *must-have*. Period.So, what are your thoughts? Shouldn't security be a much bigger focus, especially during development? I'm curious to hear what you all think! Hit me up in the comments below.<a href="https://infosec.exchange/tags/infosec" class="mention hashtag" rel="nofollow noopener" target="_blank">#infosec</a> <a href="https://infosec.exchange/tags/pentest" class="mention hashtag" rel="nofollow noopener" target="_blank">#pentest</a> <a href="https://infosec.exchange/tags/identitysecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#identitysecurity</a> <a href="https://infosec.exchange/tags/phishing" class="mention hashtag" rel="nofollow noopener" target="_blank">#phishing</a> <a href="https://infosec.exchange/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#cybersecurity</a>

Nishant KaushikI guess going from being the new perimeter to being the essential ingredient in pretty much everything is a step up. Right? Trust <a href="https://infosec.exchange/@mikekiser" class="u-url mention" rel="nofollow noopener" target="_blank">@mikekiser</a> to find a way to tell a (<a href="https://infosec.exchange/tags/identity" class="mention hashtag" rel="nofollow noopener" target="_blank">#identity</a>) story that will leave you wanting more.<a href="https://infosec.exchange/tags/IdentitySecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#IdentitySecurity</a> <a href="https://www.cpomagazine.com/cyber-security/what-do-identity-security-and-an-edible-rock-have-in-common-quite-a-bit-it-turns-out/" rel="nofollow noopener" translate="no" target="_blank">https://www.cpomagazine.com/cyber-security/what-do-identity-security-and-an-edible-rock-have-in-common-quite-a-bit-it-turns-out/</a>

Eric Woodruff [MS MVP] :donor:I've finally, as an overcommitted individual, uploaded my slides from my presentation at <a href="https://infosec.exchange/@BlueTeamCon" class="u-url mention" rel="nofollow noopener" target="_blank">@BlueTeamCon</a>, "Building yourself into a stronger identity practitioner" to my GH repo.The associated blog article with more details on resources for each slide will be coming out later this week/early next week, so stay tuned!<a href="https://infosec.exchange/tags/identity" class="mention hashtag" rel="nofollow noopener" target="_blank">#identity</a> <a href="https://infosec.exchange/tags/identitysecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#identitysecurity</a> <a href="https://infosec.exchange/tags/infosec" class="mention hashtag" rel="nofollow noopener" target="_blank">#infosec</a> <a href="https://infosec.exchange/tags/infosecjobs" class="mention hashtag" rel="nofollow noopener" target="_blank">#infosecjobs</a> <a href="https://infosec.exchange/tags/career" class="mention hashtag" rel="nofollow noopener" target="_blank">#career</a> <a href="https://infosec.exchange/tags/BlueTeamCon" class="mention hashtag" rel="nofollow noopener" target="_blank">#BlueTeamCon</a> <a href="https://infosec.exchange/tags/BlueTeamCon2023" class="mention hashtag" rel="nofollow noopener" target="_blank">#BlueTeamCon2023</a><a href="https://github.com/ericonidentity/talks/blob/main/Presentations/BTC%202023%20-%20Building%20Yourself%20Into%20a%20Stronger%20Identity%20Practitioner.pdf" rel="nofollow noopener" translate="no" target="_blank">https://github.com/ericonidentity/talks/blob/main/Presentations/BTC%202023%20-%20Building%20Yourself%20Into%20a%20Stronger%20Identity%20Practitioner.pdf</a>

Jake Hildreth (acorn) :blacker_heart_outline:The Locksmith Active Directory (AD) Certificate Services (CS) remediation tool has been updated: <a href="https://github.com/TrimarcJake/Locksmith" rel="nofollow noopener" target="_blank">https://github.com/TrimarcJake/Locksmith</a>New features: - Support for Restricted Admin Mode. If RAM is detected, Locksmith will ask to be re-run using the -Credential switch. - If the AD Powershell module is not installed on Win 10/11, Locksmith will attempt to install it for you. Note: previously only available on server-class OSes. - New functions for checking user type and elevation status. - Auto-generated snippets for ownership issues (a subset of ESC4/ESC5). - Support for non-English Active Directory environments!Next planned updates: - Add individual CA Hosts to $SafeUsers using SIDs. - Perform additional environment checks before attempting to run. - Rename modes to something that makes sense.<a href="https://infosec.exchange/tags/IAM" class="mention hashtag" rel="nofollow noopener" target="_blank">#IAM</a> <a href="https://infosec.exchange/tags/IdentitySecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#IdentitySecurity</a> <a href="https://infosec.exchange/tags/CertificateServices" class="mention hashtag" rel="nofollow noopener" target="_blank">#CertificateServices</a> <a href="https://infosec.exchange/tags/ActiveDirectory" class="mention hashtag" rel="nofollow noopener" target="_blank">#ActiveDirectory</a> <a href="https://infosec.exchange/tags/ActiveDirectoryCertificateServices" class="mention hashtag" rel="nofollow noopener" target="_blank">#ActiveDirectoryCertificateServices</a> <a href="https://infosec.exchange/tags/ADCS" class="mention hashtag" rel="nofollow noopener" target="_blank">#ADCS</a> <a href="https://infosec.exchange/tags/PKI" class="mention hashtag" rel="nofollow noopener" target="_blank">#PKI</a> <a href="https://infosec.exchange/tags/Locksmith" class="mention hashtag" rel="nofollow noopener" target="_blank">#Locksmith</a> <a href="https://infosec.exchange/tags/OpenSource" class="mention hashtag" rel="nofollow noopener" target="_blank">#OpenSource</a> <a href="https://infosec.exchange/tags/DefensiveSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#DefensiveSecurity</a> <a href="https://infosec.exchange/tags/DefensiveSecurityTooling" class="mention hashtag" rel="nofollow noopener" target="_blank">#DefensiveSecurityTooling</a> <a href="https://infosec.exchange/tags/Pizza" class="mention hashtag" rel="nofollow noopener" target="_blank">#Pizza</a>

Frank Paul SilyePrepare yourself for a paradigm shift! Passwordless is more or less here.For me the big question will be how multi-device authentication actually will work in real life - having devices running mac, windows, linux and iOS.“There’s no password attacks when there’s no password present,” Alex Weinert, Microsoft’s director of identity security. <a href="https://w3c.social/@w3c/109710664595471515" rel="nofollow noopener" target="_blank">https://w3c.social/@w3c/109710664595471515</a><a href="https://mastodon.babb.be/tags/password" class="mention hashtag" rel="nofollow noopener" target="_blank">#password</a> <a href="https://mastodon.babb.be/tags/passwordless" class="mention hashtag" rel="nofollow noopener" target="_blank">#passwordless</a> <a href="https://mastodon.babb.be/tags/passkeys" class="mention hashtag" rel="nofollow noopener" target="_blank">#passkeys</a> <a href="https://mastodon.babb.be/tags/security" class="mention hashtag" rel="nofollow noopener" target="_blank">#security</a> <a href="https://mastodon.babb.be/tags/mfa" class="mention hashtag" rel="nofollow noopener" target="_blank">#mfa</a> <a href="https://mastodon.babb.be/tags/fido" class="mention hashtag" rel="nofollow noopener" target="_blank">#fido</a> <a href="https://mastodon.babb.be/tags/WebAuthn" class="mention hashtag" rel="nofollow noopener" target="_blank">#WebAuthn</a> <a href="https://mastodon.babb.be/tags/identitysecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#identitysecurity</a> <a href="https://mastodon.babb.be/tags/identitymanagement" class="mention hashtag" rel="nofollow noopener" target="_blank">#identitymanagement</a>

Recent searches

Search options

Administered by:

Server stats:

#identitysecurity