Follow Friday: 5 Must-Read Cybersecurity Picks This Week
Discover five must-read cybersecurity articles, videos, and creators every security professional should follow this week.
Identity Security
The Visibility Crisis Behind FortiBleed, AI, and Modern Cyber Risk
FortiBleed shows why visibility matters. Also this week: CISA rewrites vulnerability management rules, enterprises struggle to understand AI usage, cybersec comms luminary Lucy Millington tackles communications overload, and more.
FortiBleed Is Bigger Than A Fortinet Password Leak
Fresh analysis suggests FortiBleed is not merely a Fortinet credential exposure event but a large-scale identity compromise campaign that turns perimeter devices into launchpads for deeper attacks against Active Directory, LDAP, and internal enterprise infrastructure.
Remembering Dr. Eric Cole, ShinyHunters Exposes Identity-to-SaaS Gap, and Why Community is Our Last Defense Against Deepfakes
Also: The CYBR.SEC.CON call for papers has been extended to June 14. We hope to see you there!
Agentic AI Is Pushing Zero Trust Into Its Next Phase
Zero Trust was designed to control people and machines. The rise of autonomous AI agents is forcing security teams to extend those same principles to software capable of making decisions and taking action on its own. (Includes infographic)
After the Vishing Call: What Enterprises, SaaS Providers, and Salesforce Need to Do Differently
Salesforce knew its platform was being systematically exploited. Charter's customers are paying the price. The gaps that enabled these intrusions are largely the same. Here's what enterprises and platform providers should have done and still need to do.
ShinyHunters' Charter Breach Exposes the Identity-to-SaaS Gap
A voice phishing call compromised one identity. Millions of records followed. The Charter breach is the latest evidence that the gap between identity security and SaaS governance isn't a gap enterprises can afford to keep ignoring.
Wendy Nather On Cyber Lessons That Come From The Near-Misses
In CYBR.SEC.CAST Episode 66, Wendy Nather explains why cybersecurity’s biggest lessons aren’t coming from breaches, but from the near-misses no one talks about.