Related events

Cybercast

Beyond the Hype: The Cybersecurity Trends CISOs are Keeping an Eye on in 2026

Beyond the data perimeter: Why next-generation DSPM is the foundation for modern data security

Virtual Conference

Securing the Future of Finance: Strategies to Counter Modern Cyber Threats

Data Security

<body>Interview Segment: Tony Kelly</body>

<body><h3>Interview Segment: Tony Kelly</h3></body>

<body>Illuminating Data Blind Spots</body>

<body><p>Illuminating Data Blind Spots</p></body>

<body>As data sprawls across clouds and collaboration tools, shadow data and fragmented controls have become some of the biggest blind spots in enterprise security. In this segment, we’ll unpack how Data Security Posture Management (DSPM) helps organizations regain visibility and control over their most sensitive assets.</body>

<body><p>As data sprawls across clouds and collaboration tools, shadow data and fragmented controls have become some of the biggest blind spots in enterprise security. In this segment, we’ll unpack how Data Security Posture Management (DSPM) helps organizations regain visibility and control over their most sensitive assets.</p></body>

<body>Our guest will break down how DSPM differs from adjacent technologies like DLP, CSPM, and DSP, and how it integrates into broader Zero Trust and cloud security strategies. We’ll also explore how compliance and regulatory pressures are shaping the next evolution of the DSPM market—and what security leaders should be doing now to prepare.</body>

<body><p>Our guest will break down how DSPM differs from adjacent technologies like DLP, CSPM, and DSP, and how it integrates into broader Zero Trust and cloud security strategies. We’ll also explore how compliance and regulatory pressures are shaping the next evolution of the DSPM market—and what security leaders should be doing now to prepare.</p></body>

<body><a rel="noreferrer noopener" target="_blank" href="https://static.fortra.com/corporate/pdfs/brochure/fta-corp-fortra-dspm-br.pdf">https://static.fortra.com/corporate/pdfs/brochure/fta-corp-fortra-dspm-br.pdf</a></body>

<body><p><a rel="noreferrer noopener" target="_blank" href="https://static.fortra.com/corporate/pdfs/brochure/fta-corp-fortra-dspm-br.pdf">https://static.fortra.com/corporate/pdfs/brochure/fta-corp-fortra-dspm-br.pdf</a></p></body>

<body>This segment is sponsored by Fortra. Visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/fortra">https://securityweekly.com/fortra</a> to learn more about them!</body>

<body><p>This segment is sponsored by Fortra. Visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/fortra">https://securityweekly.com/fortra</a> to learn more about them!</p></body>

<body>Topic Segment: We've got passkeys, now what?</body>

<body><h3>Topic Segment: We've got passkeys, now what?</h3></body>

<body>Over this year on this podcast, we've talked a lot about infostealers. Passkeys are a clear solution to implementing phishing and theft-resistant authentication, but what about all these infostealers stealing OAuth keys and refresh tokens? As long as session hijacking is as simple as moving a cookie from one machine to another, securing authentication seems like solving only half the problem. Locking the front door, but leaving a side door unlocked.</body>

<body><p>Over this year on this podcast, we've talked a lot about infostealers. Passkeys are a clear solution to implementing phishing and theft-resistant authentication, but what about all these infostealers stealing OAuth keys and refresh tokens? As long as session hijacking is as simple as moving a cookie from one machine to another, securing authentication seems like solving only half the problem. Locking the front door, but leaving a side door unlocked.</p></body>

<body>After doing some research, it appears that there has been some work on this front, including a few standards that have been introduced:</body>

<body><p>After doing some research, it appears that there has been some work on this front, including a few standards that have been introduced:</p></body>

<body><ol><li>DBSC (Device Bound Session Credentials) for browsers</li><li>DPoP (Demonstrating Proof of Possession) for OAuth applications</li></ol></body>

<body>We'll address a few key questions in this segment:
1. how do these new standards help stop token theft?
2. how broadly have they been adopted?</body>

<body><p>We'll address a few key questions in this segment:
1. how do these new standards help stop token theft?
2. how broadly have they been adopted?</p></body>

<body><ul><li>FIDO Alliance White Paper: <a rel="noreferrer noopener" target="_blank" href="https://fidoalliance.org/white-paper-dbsc-dpop-as-complementary-technologies-to-fido-authentication/">DBSC/DPOP as Complementary Technologies to FIDO Authentication</a></li></ul></body>

Featured image for {“vendor”:”ppworks”,”type”:”segment”,”id”:”14457″} podcast from PPWorks

AI benefits/risks

Acquisition

Illuminating Data Blind Spots, Topic, Enterprise News – Tony Kelly – ESW #437

Encryption

Threat Intelligence

Brief

Attacks exploiting Gladinet CentreStack cryptographic algorithm bug ongoing

Vulnerability Management

Exposure management

AI/ML

Application security

Perspective

How the ‘Lethal Trifecta’ sets the conditions for stealing data on command

concept of leaky software, data with a tap sticking out.3d illustration

concept of leaky software, data with a tap sticking out

Patch/Configuration Management

Misconfigured database exposes almost 4.3B records

VW VOLKSWAGEN Logo

Allegedly stolen Indian Volkswagen dealership data up for sale

AdobeStock_1755142791_Editorial_Use_Only

Generative AI

News

Google addresses ‘GeminiJack’ exploit affecting Gemini Enterprise

A robotic hand interacts with a laptop, surrounded by digital icons representing networks and artificial intelligence, showcasing future technology and innovation

Futuristic robotic hand interacting with digital network on laptop keyboard, representing technology, artificial intelligence, and data connectivity concepts. Tessel

Security Operations

Gartner warns of significant cybersecurity risks with AI browsers

AI improves SEO with smart keyword tools, search pattern analysis, and virtual assistants to boost online visibility and marketing reach.