Topic

Cloud Security

Cloud control plane abuse, Kubernetes exposure, SaaS defaults, and vendor risk.

Articles: 2
Desks: 2

Infographic briefing poster for The Post-Quantum Enterprise Migration Deadline: Implementing FIPS 203 ML-KEM and FIPS 204 ML-DSA Ahead of CNSA 2.0

The Post-Quantum Enterprise Migration Deadline: Implementing FIPS 203 (ML-KEM) and FIPS 204 (ML-DSA) Ahead of CNSA 2.0

With NIST finalizing FIPS 203 and 204, enterprises face CNSA 2.0 deadlines. We break down hybrid TLS 1.3 handshakes, MTU packet fragmentation, and CBOM discovery.

Sep 19 · 8 min

highIdentity Cloud Security

The 28-Hour Revocation Gap: Why Entra ID Continuous Access Evaluation (CAE) Fails Against Session Token Theft

Entra ID Continuous Access Evaluation (CAE) tokens last up to 28 hours, and only ~4.5% of Microsoft services support it. Here is how AiTM attackers exploit the gap.

Sep 19 · 9 min