Related events

Cybercast

Beyond the Hype: The Cybersecurity Trends CISOs are Keeping an Eye on in 2026

Beyond the data perimeter: Why next-generation DSPM is the foundation for modern data security

Virtual Conference

Securing the Future of Finance: Strategies to Counter Modern Cyber Threats

Data Security

Home Depot is the Largest Home Improvement Retailer in the US

Ft. Wayne – Circa June 2018: Home Depot Location flying the American flag. Home Depot is the Largest Home Improvement Retailer in the US II

Security Operations

Brief

Home Depot systems exposed for a year due to employee error

Breach

700Credit data breach exposes millions of personal records

concept of leaky software, data with a tap sticking out.3d illustration

concept of leaky software, data with a tap sticking out

Privacy

Photo booth company exposes customer photos due to security flaw

<body>Interview Segment: Tony Kelly</body>

<body><h3>Interview Segment: Tony Kelly</h3></body>

<body>Illuminating Data Blind Spots</body>

<body><p>Illuminating Data Blind Spots</p></body>

<body>As data sprawls across clouds and collaboration tools, shadow data and fragmented controls have become some of the biggest blind spots in enterprise security. In this segment, we’ll unpack how Data Security Posture Management (DSPM) helps organizations regain visibility and control over their most sensitive assets.</body>

<body><p>As data sprawls across clouds and collaboration tools, shadow data and fragmented controls have become some of the biggest blind spots in enterprise security. In this segment, we’ll unpack how Data Security Posture Management (DSPM) helps organizations regain visibility and control over their most sensitive assets.</p></body>

<body>Our guest will break down how DSPM differs from adjacent technologies like DLP, CSPM, and DSP, and how it integrates into broader Zero Trust and cloud security strategies. We’ll also explore how compliance and regulatory pressures are shaping the next evolution of the DSPM market—and what security leaders should be doing now to prepare.</body>

<body><p>Our guest will break down how DSPM differs from adjacent technologies like DLP, CSPM, and DSP, and how it integrates into broader Zero Trust and cloud security strategies. We’ll also explore how compliance and regulatory pressures are shaping the next evolution of the DSPM market—and what security leaders should be doing now to prepare.</p></body>

<body><a rel="noreferrer noopener" target="_blank" href="https://static.fortra.com/corporate/pdfs/brochure/fta-corp-fortra-dspm-br.pdf">https://static.fortra.com/corporate/pdfs/brochure/fta-corp-fortra-dspm-br.pdf</a></body>

<body><p><a rel="noreferrer noopener" target="_blank" href="https://static.fortra.com/corporate/pdfs/brochure/fta-corp-fortra-dspm-br.pdf">https://static.fortra.com/corporate/pdfs/brochure/fta-corp-fortra-dspm-br.pdf</a></p></body>

<body>This segment is sponsored by Fortra. Visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/fortra">https://securityweekly.com/fortra</a> to learn more about them!</body>

<body><p>This segment is sponsored by Fortra. Visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/fortra">https://securityweekly.com/fortra</a> to learn more about them!</p></body>

<body>Topic Segment: We've got passkeys, now what?</body>

<body><h3>Topic Segment: We've got passkeys, now what?</h3></body>

<body>Over this year on this podcast, we've talked a lot about infostealers. Passkeys are a clear solution to implementing phishing and theft-resistant authentication, but what about all these infostealers stealing OAuth keys and refresh tokens? As long as session hijacking is as simple as moving a cookie from one machine to another, securing authentication seems like solving only half the problem. Locking the front door, but leaving a side door unlocked.</body>

<body><p>Over this year on this podcast, we've talked a lot about infostealers. Passkeys are a clear solution to implementing phishing and theft-resistant authentication, but what about all these infostealers stealing OAuth keys and refresh tokens? As long as session hijacking is as simple as moving a cookie from one machine to another, securing authentication seems like solving only half the problem. Locking the front door, but leaving a side door unlocked.</p></body>

<body>After doing some research, it appears that there has been some work on this front, including a few standards that have been introduced:</body>

<body><p>After doing some research, it appears that there has been some work on this front, including a few standards that have been introduced:</p></body>

<body><ol><li>DBSC (Device Bound Session Credentials) for browsers</li><li>DPoP (Demonstrating Proof of Possession) for OAuth applications</li></ol></body>

<body>We'll address a few key questions in this segment:
1. how do these new standards help stop token theft?
2. how broadly have they been adopted?</body>

<body><p>We'll address a few key questions in this segment:
1. how do these new standards help stop token theft?
2. how broadly have they been adopted?</p></body>

<body><ul><li>FIDO Alliance White Paper: <a rel="noreferrer noopener" target="_blank" href="https://fidoalliance.org/white-paper-dbsc-dpop-as-complementary-technologies-to-fido-authentication/">DBSC/DPOP as Complementary Technologies to FIDO Authentication</a></li></ul></body>

Data Security

Related events

Beyond the Hype: The Cybersecurity Trends CISOs are Keeping an Eye on in 2026

Beyond the data perimeter: Why next-generation DSPM is the foundation for modern data security

Securing the Future of Finance: Strategies to Counter Modern Cyber Threats

Home Depot systems exposed for a year due to employee error

700Credit data breach exposes millions of personal records

Photo booth company exposes customer photos due to security flaw

Illuminating Data Blind Spots, Topic, Enterprise News – Tony Kelly – ESW #437

Attacks exploiting Gladinet CentreStack cryptographic algorithm bug ongoing

How the ‘Lethal Trifecta’ sets the conditions for stealing data on command

Misconfigured database exposes almost 4.3B records

Fast Five

Selected by the SC Media Editorial team every Tuesday.