Resources

This week, the main focus was on vulnerabilities affecting internet-facing applications and identity infrastructure. There

Key Takeaways Cybersecurity mesh architecture (CSMA) replaces one network perimeter with security controls placed at

Key Takeaways FinCEN’s November 2024 alert (FIN-2024-Alert004) confirmed a rise in deepfake-enabled fraud against financial

Key Takeaways CI/CD pipeline security covers two layers: the pipeline itself (code, secrets, dependencies, runners)

Key Takeaways Most account takeover attack prevention programs are built around credential stuffing and stop

The Week in One Line A compromised Cloudflare API key enabled attackers to tamper with

Key Takeaways GraphQL sends every request to one endpoint and lets the client define the

Key Takeaways OAuth is a token-based authorization framework: it lets an application access a user’s

Key Takeaways AI security spans models, agents, data, identities, and third-party integrations – not just

Key Takeaways API gateway security is the set of controls, mainly authentication, authorization, and rate

Reporting Convention New this week refers to vulnerabilities, exploits, or incidents disclosed between September 9–16.

Two decades ago, security meant building a wall. Today, the wall is gone. Every AI