frederick_lee

This is not your typical data center environment: What to consider when migrating to the cloud

Security Architecture

Threat Management

Phishing

Resource

LevelBlue

Don’t break in, log in: How abuse of trust leads to system compromise

<body>Appsec often frames usability and security as at odds with each other. Apple's software has famously emphasized the importance of usability while also creating a solid security foundation. Patrick Wardle talks about how he's seen malware shift from Windows to macOS, how Apple's aggressive stance on deprecation benefits security, and the areas of the OS where he still sees plenty of opportunity for more security research. We discuss how developers make defensible design choices, why privacy needs security, and some security principles that any app developer should keep in mind regardless of their programming language or operating system.</body>

<body>Appsec often frames usability and security as at odds with each other. Apple's software has famously emphasized the importance of usability while also creating a solid security foundation. Patrick Wardle talks about how he's seen malware shift from Windows to macOS, how Apple's aggressive stance on deprecation benefits security, and the areas of the OS where he still sees plenty of opportunity for more security research. We discuss how developers make defensible design choices, why privacy needs security, and some security principles that any app developer should keep in mind regardless of their programming language or operating system.</body>

<body><ul><li><a rel="noreferrer noopener" target="_blank" href="https://objective-see.org/blog/blog_0x86.html">https://objective-see.org/blog/blog_0x86.html</a></li><li><a rel="noreferrer noopener" target="_blank" href="https://objective-see.org/products/lulu.html">https://objective-see.org/products/lulu.html</a></li><li><a rel="noreferrer noopener" target="_blank" href="https://objectivebythesea.org/v9/index.html">https://objectivebythesea.org/v9/index.html</a></li></ul></body>

Featured image for {“vendor”:”ppworks”,”type”:”segment”,”id”:”14846″} podcast from PPWorks

Application security

Malware

MacOS Security Design Features, Flaws, And Futures – Patrick Wardle – ASW #392

<body>AI agents aren't quite human and aren't traditional machines. So how do you secure workflows that involve humans using AI to access sensitive data, and do it at machine speed and scale? David breaks down the challenges and discusses actual implementations of IAM for AI to explain how to solve them.</body>

<body>AI agents aren't quite human and aren't traditional machines. So how do you secure workflows that involve humans using AI to access sensitive data, and do it at machine speed and scale? David breaks down the challenges and discusses actual implementations of IAM for AI to explain how to solve them.</body>

<body>Segment Resources:
<a rel="noreferrer noopener" target="_blank" href="https://aembit.io/case-study/a-300b-investment-firm-secures-claude-access-with-aembit/">https://aembit.io/case-study/a-300b-investment-firm-secures-claude-access-with-aembit/</a></body>

<body>Segment Resources:
<a rel="noreferrer noopener" target="_blank" href="https://aembit.io/case-study/a-300b-investment-firm-secures-claude-access-with-aembit/">https://aembit.io/case-study/a-300b-investment-firm-secures-claude-access-with-aembit/</a></body>

<body><a rel="noreferrer noopener" target="_blank" href="https://aembit.io/blog/aembit-now-secures-microsoft-copilot-studio-agents/">https://aembit.io/blog/aembit-now-secures-microsoft-copilot-studio-agents/</a></body>

<body><a rel="noreferrer noopener" target="_blank" href="https://aembit.io/blog/aembit-now-secures-microsoft-copilot-studio-agents/">https://aembit.io/blog/aembit-now-secures-microsoft-copilot-studio-agents/</a></body>

<body><a rel="noreferrer noopener" target="_blank" href="https://www.youtube.com/watch?v=cSInzRUXvNc">https://www.youtube.com/watch?v=cSInzRUXvNc</a></body>

<body><a rel="noreferrer noopener" target="_blank" href="https://www.youtube.com/watch?v=cSInzRUXvNc">https://www.youtube.com/watch?v=cSInzRUXvNc</a></body>

<body>This segment is sponsored by Aembit. Visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/aembitidv">https://securityweekly.com/aembitidv</a> to learn more about them!</body>

<body>This segment is sponsored by Aembit. Visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/aembitidv">https://securityweekly.com/aembitidv</a> to learn more about them!</body>

Featured image for {“vendor”:”ppworks”,”type”:”segment”,”id”:”15400″} podcast from PPWorks

Identity

IAM Technologies

Blended Identities and the challenge of IAM for AI – David Goldschlag – IDV26 #1

<body>Identity security has entered its chaotic era. Human, non-human, and agentic AI identities no longer just coexist. They form an uncontrolled inheritance chain in which a human creates an agent, the agent spins up service principals, OAuth grants, and role assignments, and that whole chain keeps running long after the human changes roles or leaves. Most of these chains are being spawned by business users on low-code and enterprise AI platforms, outside traditional identity controls and largely invisible to security.</body>

<body>Identity security has entered its chaotic era. Human, non-human, and agentic AI identities no longer just coexist. They form an uncontrolled inheritance chain in which a human creates an agent, the agent spins up service principals, OAuth grants, and role assignments, and that whole chain keeps running long after the human changes roles or leaves. Most of these chains are being spawned by business users on low-code and enterprise AI platforms, outside traditional identity controls and largely invisible to security.</body>

<body>In this segment, Radiant Logic CEO Dr. John Pritchard joins us to unpack why this is no longer a visibility problem. It is an observability problem. And it is shifting the center of gravity in identity security from authentication to authorization. Listeners will leave with a clearer view of where their current IAM, IGA, and NHI programs fall short, and a practical lens for governing the rapidly expanding population of AI agents already inside their environments.</body>

<body>In this segment, Radiant Logic CEO Dr. John Pritchard joins us to unpack why this is no longer a visibility problem. It is an observability problem. And it is shifting the center of gravity in identity security from authentication to authorization. Listeners will leave with a clearer view of where their current IAM, IGA, and NHI programs fall short, and a practical lens for governing the rapidly expanding population of AI agents already inside their environments.</body>

<body><a rel="noreferrer noopener" target="_blank" href="https://www.radiantlogic.com">https://www.radiantlogic.com</a>
<a rel="noreferrer noopener" target="_blank" href="https://www.radiantlogic.com/resource/through-the-eyes-of-the-adversary/">https://www.radiantlogic.com/resource/through-the-eyes-of-the-adversary/</a>
<a rel="noreferrer noopener" target="_blank" href="https://www.radiantlogic.com/resource/identities-under-attack-how-adversaries-exploit/">https://www.radiantlogic.com/resource/identities-under-attack-how-adversaries-exploit/</a></body>

<body><a rel="noreferrer noopener" target="_blank" href="https://www.radiantlogic.com">https://www.radiantlogic.com</a>
<a rel="noreferrer noopener" target="_blank" href="https://www.radiantlogic.com/resource/through-the-eyes-of-the-adversary/">https://www.radiantlogic.com/resource/through-the-eyes-of-the-adversary/</a>
<a rel="noreferrer noopener" target="_blank" href="https://www.radiantlogic.com/resource/identities-under-attack-how-adversaries-exploit/">https://www.radiantlogic.com/resource/identities-under-attack-how-adversaries-exploit/</a></body>

<body>To go deeper on what John discussed today, watch Radiant Logic's on-demand webinar Identities Under Attack: How Adversaries Exploit the Human-Machine-Agent Divide at <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/radiantlogicidv">https://securityweekly.com/radiantlogicidv</a>.</body>

<body>To go deeper on what John discussed today, watch Radiant Logic's on-demand webinar Identities Under Attack: How Adversaries Exploit the Human-Machine-Agent Divide at <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/radiantlogicidv">https://securityweekly.com/radiantlogicidv</a>.</body>

Featured image for {“vendor”:”ppworks”,”type”:”segment”,”id”:”15394″} podcast from PPWorks

The Three Identity Problem: Surviving Identity Security’s Chaotic Era – John Pritchard – IDV26 #1

Hybrid work  technology  teams A digital network map on a monitor

SASE

AI/ML

Nurture

Palo Alto Networks

Next-generation enterprise defense: Managing risk in the age of agentic AI

<body><h3>Interview with Karen Heart</h3></body>

<body>Rethinking Security from the OS Up in the Age of AI</body>

<body>Rethinking Security from the OS Up in the Age of AI</body>

<body>Karen Heart discusses a file-system–first approach to security, arguing that most modern attacks—including ransomware and supply chain compromises—succeed because they inherit user permissions and operate inside overly trusted system structures.</body>

<body>Karen Heart discusses a file-system–first approach to security, arguing that most modern attacks—including ransomware and supply chain compromises—succeed because they inherit user permissions and operate inside overly trusted system structures.</body>

<body>She explains how limiting file access, socket (network) access, and privilege escalation at the operating system level can reduce entire classes of attacks. Rather than relying on reactive detection, her approach emphasizes immutable, allowlisted controls embedded close to the kernel layer, designed to prevent both data exfiltration and malicious code execution at the source.</body>

<body>She explains how limiting file access, socket (network) access, and privilege escalation at the operating system level can reduce entire classes of attacks. Rather than relying on reactive detection, her approach emphasizes immutable, allowlisted controls embedded close to the kernel layer, designed to prevent both data exfiltration and malicious code execution at the source.</body>

<body>The conversation also explores how AI agents and contractors expand the attack surface, reinforcing the need for strict isolation, backup protection, and deterministic system boundaries.</body>

<body>The conversation also explores how AI agents and contractors expand the attack surface, reinforcing the need for strict isolation, backup protection, and deterministic system boundaries.</body>

<body><ul><li><a rel="noreferrer noopener" target="_blank" href="https://www.simonandschuster.com/books/Zero-Day-Secure/Karen-Heart/9781968865078">https://www.simonandschuster.com/books/Zero-Day-Secure/Karen-Heart/9781968865078</a></li></ul></body>

<body>Karen's product, including a link to Github, is at <a rel="noreferrer noopener" target="_blank" href="https://heartsecsuite.com/">https://heartsecsuite.com/</a>
You can contact Karen at karen@heartsecsuite.com</body>

<body>Karen's product, including a link to Github, is at <a rel="noreferrer noopener" target="_blank" href="https://heartsecsuite.com/">https://heartsecsuite.com/</a>
You can contact Karen at karen@heartsecsuite.com</body>

<body>RSAC Executive Interviews, Part 1</body>

<body><h3>RSAC Executive Interviews, Part 1</h3></body>

<body>​The New Era of DNS Resilience: Breaking down the newly finalized NIST SP 800-81</body>

<body>​The New Era of DNS Resilience: Breaking down the newly finalized NIST SP 800-81</body>

<body>Craig Sanderson from Infoblox will dive into the newly finalized NIST SP 800-81 as it marks a pivotal shift in DNS security, emphasizing resilience through modernized practices tailored for today’s distributed, cloud-driven, and threat-laden environments. This update provides actionable guidance for organizations to strengthen DNS infrastructure against evolving threats like ransomware and data exfiltration, while prioritizing initiatives like DNSSEC, encryption, and protective DNS for immediate risk reduction.</body>

<body>Craig Sanderson from Infoblox will dive into the newly finalized NIST SP 800-81 as it marks a pivotal shift in DNS security, emphasizing resilience through modernized practices tailored for today’s distributed, cloud-driven, and threat-laden environments. This update provides actionable guidance for organizations to strengthen DNS infrastructure against evolving threats like ransomware and data exfiltration, while prioritizing initiatives like DNSSEC, encryption, and protective DNS for immediate risk reduction.</body>

<body>This segment is sponsored by Infoblox. Visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/infobloxrsac">https://securityweekly.com/infobloxrsac</a> to learn more about them!</body>

<body>This segment is sponsored by Infoblox. Visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/infobloxrsac">https://securityweekly.com/infobloxrsac</a> to learn more about them!</body>

<body>Agentic AI and the Future of Threat Intelligence Operations</body>

<body>Agentic AI and the Future of Threat Intelligence Operations</body>

<body>Security teams collect large volumes of threat intelligence but often struggle to translate that information into coordinated operational response. This discussion explores how organizations are embedding intelligence directly into security workflows and introducing AI agents to support investigation, enrichment and response.
Sachin will discuss Cyware’s Agentic Fabric approach and the evolution toward an agent-centric model, where a portfolio of specialized agents assists analysts across threat intelligence, detection engineering and response workflows. The conversation will focus on how AI can support security teams while maintaining human oversight and operational control.</body>

<body>Security teams collect large volumes of threat intelligence but often struggle to translate that information into coordinated operational response. This discussion explores how organizations are embedding intelligence directly into security workflows and introducing AI agents to support investigation, enrichment and response.
Sachin will discuss Cyware’s Agentic Fabric approach and the evolution toward an agent-centric model, where a portfolio of specialized agents assists analysts across threat intelligence, detection engineering and response workflows. The conversation will focus on how AI can support security teams while maintaining human oversight and operational control.</body>

<body>This segment is sponsored by Cyware. Visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/cywarersac">https://securityweekly.com/cywarersac</a> to learn more about them!</body>

<body>This segment is sponsored by Cyware. Visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/cywarersac">https://securityweekly.com/cywarersac</a> to learn more about them!</body>

<body>RSAC Executive Interviews, Part 2</body>

<body><h3>RSAC Executive Interviews, Part 2</h3></body>

<body>Beyond the Audit: Making Cyber Risk Continuous, Quantified, and Actionable</body>

<body>Beyond the Audit: Making Cyber Risk Continuous, Quantified, and Actionable</body>

<body>Most companies assess cyber risk once a year and call it done — but for organizations managing dozens of subsidiaries or portfolio companies, that's a costly blind spot. In this RSA interview, Resilience's VP of Customer Engagement explores why measuring risk in dollars (not color-coded charts) changes the conversation at the board level, and why the organizations best positioned to prevent losses are the ones treating cyber risk as a continuous discipline rather than an annual exercise.</body>

<body>Most companies assess cyber risk once a year and call it done — but for organizations managing dozens of subsidiaries or portfolio companies, that's a costly blind spot. In this RSA interview, Resilience's VP of Customer Engagement explores why measuring risk in dollars (not color-coded charts) changes the conversation at the board level, and why the organizations best positioned to prevent losses are the ones treating cyber risk as a continuous discipline rather than an annual exercise.</body>

<body>See it in action. Request a demo at <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/resiliencersac">https://securityweekly.com/resiliencersac</a>.</body>

<body>See it in action. Request a demo at <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/resiliencersac">https://securityweekly.com/resiliencersac</a>.</body>

<body>Delinea: Redefining Identity Security for the Agentic AI Era</body>

<body>Delinea: Redefining Identity Security for the Agentic AI Era</body>

<body>As enterprises scale agentic AI and automation, privileged access is increasingly required by non-human identities (NHIs) that operate autonomously across hybrid and cloud-native environments, introducing risks that static, credential-based models were never designed to govern. Delinea's recent of acquisition of StrongDM.</body>

<body>As enterprises scale agentic AI and automation, privileged access is increasingly required by non-human identities (NHIs) that operate autonomously across hybrid and cloud-native environments, introducing risks that static, credential-based models were never designed to govern. Delinea's recent of acquisition of StrongDM.</body>

<body>This segment is sponsored by Delinea. Visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/delinearsac">https://securityweekly.com/delinearsac</a> to learn more about them!</body>

<body>This segment is sponsored by Delinea. Visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/delinearsac">https://securityweekly.com/delinearsac</a> to learn more about them!</body>

Featured image for {“vendor”:”ppworks”,”type”:”segment”,”id”:”14902″} podcast from PPWorks

Ransomware

AI benefits/risks

Rethinking Security from the OS Up in the Age of AI and more RSAC 2026 Interviews – Craig Sanderson, Sachin Jade, Travis Wong, Phil Calvin, Karen Heart – ESW #456

Security Architecture

Related Videos

This is not your typical data center environment: What to consider when migrating to the cloud

Don’t break in, log in: How abuse of trust leads to system compromise

MacOS Security Design Features, Flaws, And Futures – Patrick Wardle – ASW #392

Blended Identities and the challenge of IAM for AI – David Goldschlag – IDV26 #1

The Three Identity Problem: Surviving Identity Security’s Chaotic Era – John Pritchard – IDV26 #1

Next-generation enterprise defense: Managing risk in the age of agentic AI

Rethinking Security from the OS Up in the Age of AI and more RSAC 2026 Interviews – Craig Sanderson, Sachin Jade, Travis Wong, Phil Calvin, Karen Heart – ESW #456

Identity security: In the critical path for agent deployment

Beyond the vault: Rethinking privileged access security

Fast Five

Selected by the SC Media Editorial team every Tuesday.