chuvakinthumb

How EDR was supposed to help with alert overload

doncoxthumbnail

Patch management in the age of work-from-home

Endpoint/Device Security

Windows 11 start button on computer menu screen close up view

Start windows 11 button

Brief

Windows bind links exploited for EDR evasion

Header graphic features a laptop with a red warning triangle and alert icons, dark background with streaming green code. It suggests concepts of cybersecurity threats, hacking, and system errors.

Header graphic features a laptop with a red warning triangle and

Old Microsoft-signed UEFI applications can bypass Secure Boot

fortinet_AdobeStock_422057363_Editorial_Use_Only

Fortinet enhances endpoint security with AI monitoring and data loss prevention

Cloud-based Cybersecurity Solutions Concept – Endpoint Protection – 3D Illustration

Nexus

Tech Explainer

Why Endpoint Hardening Still Fails in Mature Security Programs

Abstract background with connected gears working together, from skills to success. Creative development process.

How to Build an Endpoint Hardening and Exposure Management Program

<body>Interview with François Proulx from Boost Security</body>

<body><h3>Interview with François Proulx from Boost Security</h3></body>

<body><strong>Software Supply Chain Security: Build Pipeline (CI/CD) Exploitation</strong></body>

<body><p><strong>Software Supply Chain Security: Build Pipeline (CI/CD) Exploitation</strong></p></body>

<body>Boost Security is the creator of some very popular build pipeline security tools, like Bagel and Poutine. Today, we discuss their latest tool, Smoked Meat. They describe it as "Like Metasploit, but for CI/CD pipelines".</body>

<body><p>Boost Security is the creator of some very popular build pipeline security tools, like Bagel and Poutine. Today, we discuss their latest tool, Smoked Meat. They describe it as "Like Metasploit, but for CI/CD pipelines".</p></body>

<body><ul><li>Smoked Meat <a rel="noreferrer noopener" target="_blank" href="https://labs.boostsecurity.io/articles/introducing-smokedmeat">announcement</a></li><li>Smoked Meat <a rel="noreferrer noopener" target="_blank" href="https://github.com/boostsecurityio/smokedmeat">github</a></li><li>Smoked <a rel="noreferrer noopener" target="_blank" href="https://www.youtube.com/watch?v=F5Hr_201Au8">Meat demo</a> with Guillaume and François</li></ul></body>

<body>Dr. John Prichard from Radiant Logic</body>

<body><h3>Dr. John Prichard from Radiant Logic</h3></body>

<body><strong>The Three Identity Problem: Surviving Identity Security's Chaotic Era</strong></body>

<body><p><strong>The Three Identity Problem: Surviving Identity Security's Chaotic Era</strong></p></body>

<body>Identity security has entered its chaotic era. Human, non-human, and agentic AI identities no longer just coexist. They form an uncontrolled inheritance chain in which a human creates an agent, the agent spins up service principals, OAuth grants, and role assignments, and that whole chain keeps running long after the human changes roles or leaves. Most of these chains are being spawned by business users on low-code and enterprise AI platforms, outside traditional identity controls and largely invisible to security.</body>

<body><p>Identity security has entered its chaotic era. Human, non-human, and agentic AI identities no longer just coexist. They form an uncontrolled inheritance chain in which a human creates an agent, the agent spins up service principals, OAuth grants, and role assignments, and that whole chain keeps running long after the human changes roles or leaves. Most of these chains are being spawned by business users on low-code and enterprise AI platforms, outside traditional identity controls and largely invisible to security.</p></body>

<body>In this segment, Radiant Logic CEO Dr. John Pritchard joins us to unpack why this is no longer a visibility problem. It is an observability problem. And it is shifting the center of gravity in identity security from authentication to authorization. Listeners will leave with a clearer view of where their current IAM, IGA, and NHI programs fall short, and a practical lens for governing the rapidly expanding population of AI agents already inside their environments.</body>

<body><p>In this segment, Radiant Logic CEO Dr. John Pritchard joins us to unpack why this is no longer a visibility problem. It is an observability problem. And it is shifting the center of gravity in identity security from authentication to authorization. Listeners will leave with a clearer view of where their current IAM, IGA, and NHI programs fall short, and a practical lens for governing the rapidly expanding population of AI agents already inside their environments.</p></body>

<body>To go deeper on what John discussed today, watch Radiant Logic's on-demand webinar Identities Under Attack: How Adversaries Exploit the Human-Machine-Agent Divide at <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/radiantlogicidv">https://securityweekly.com/radiantlogicidv</a>.</body>

<body><p>To go deeper on what John discussed today, watch Radiant Logic's on-demand webinar Identities Under Attack: How Adversaries Exploit the Human-Machine-Agent Divide at <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/radiantlogicidv">https://securityweekly.com/radiantlogicidv</a>.</p></body>

<body>Cassie Christensen from Saviynt</body>

<body><h3>Cassie Christensen from Saviynt</h3></body>

<body><strong>Everyone Wants an AI Assistant. Few Are Ready to Govern One</strong></body>

<body><p><strong>Everyone Wants an AI Assistant. Few Are Ready to Govern One</strong></p></body>

<body>Explore a growing reality many professionals can relate to: the appeal of using AI agents to handle the work that keeps piling up - from inbox management to research and logistics - and the governance challenges that quickly follow. The real barrier to scaling personal or enterprise AI agents isn’t the technology itself, but defining clear roles, access boundaries, oversight, and lifecycle management. As organizations deploy more autonomous AI agents, the same identity frameworks used to govern workforce and non-employee identities must now evolve to manage AI-driven access before scale and risk outpace control.</body>

<body><p>Explore a growing reality many professionals can relate to: the appeal of using AI agents to handle the work that keeps piling up - from inbox management to research and logistics - and the governance challenges that quickly follow. The real barrier to scaling personal or enterprise AI agents isn’t the technology itself, but defining clear roles, access boundaries, oversight, and lifecycle management. As organizations deploy more autonomous AI agents, the same identity frameworks used to govern workforce and non-employee identities must now evolve to manage AI-driven access before scale and risk outpace control.</p></body>

<body>This segment is sponsored by Saviynt. Learn more or get a free demo at <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/saviyntidv">https://securityweekly.com/saviyntidv</a></body>

<body><p>This segment is sponsored by Saviynt. Learn more or get a free demo at <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/saviyntidv">https://securityweekly.com/saviyntidv</a></p></body>

<body>Jaime Lewis-Gross from Saviynt</body>

<body><h3>Jaime Lewis-Gross from Saviynt</h3></body>

<body><strong>From Sales Engineer to Forward Deployed Engineer: The Rise of Hybrid Technical Roles</strong></body>

<body><p><strong>From Sales Engineer to Forward Deployed Engineer: The Rise of Hybrid Technical Roles</strong></p></body>

<body>As technology organizations evolve, technical roles are becoming increasingly fluid - particularly at the intersection of product, engineering, and customer success. This conversation explores what it means to be a modern sales engineer and how the role is increasingly expanding into responsibilities often associated with forward deployed engineers: translating complex technical capabilities into real-world outcomes, solving customer challenges in real time, and serving as a critical bridge between product teams and end users. At the center of this evolution is a customer-first mindset - one that prioritizes listening, adaptability, and long-term partnership. As organizations race to innovate, the companies that stand out will be those that remain deeply focused on customer needs while empowering technical teams to operate beyond traditional role boundaries.</body>

<body><p>As technology organizations evolve, technical roles are becoming increasingly fluid - particularly at the intersection of product, engineering, and customer success. This conversation explores what it means to be a modern sales engineer and how the role is increasingly expanding into responsibilities often associated with forward deployed engineers: translating complex technical capabilities into real-world outcomes, solving customer challenges in real time, and serving as a critical bridge between product teams and end users. At the center of this evolution is a customer-first mindset - one that prioritizes listening, adaptability, and long-term partnership. As organizations race to innovate, the companies that stand out will be those that remain deeply focused on customer needs while empowering technical teams to operate beyond traditional role boundaries.</p></body>

<body><h3>Kim Brown from LexisNexis</h3></body>

<body><strong>Stop Identity Fraud: Modern Strategies for Insurance and Healthcare</strong></body>

<body><p><strong>Stop Identity Fraud: Modern Strategies for Insurance and Healthcare</strong></p></body>

<body>Identity fraud is growing more sophisticated across both insurance and healthcare, making identity management a critical line of defense. In this executive interview, Kim Brown, VP of Product Management, will explore how organizations can strengthen identity verification, authentication, and risk assessment to reduce fraud while improving user experiences. The discussion will highlight emerging threats, evolving regulatory expectations, and practical strategies for deploying identity solutions at scale. Attendees will gain actionable insights to protect customers, patients, and their organizations without adding friction.</body>

<body><p>Identity fraud is growing more sophisticated across both insurance and healthcare, making identity management a critical line of defense. In this executive interview, Kim Brown, VP of Product Management, will explore how organizations can strengthen identity verification, authentication, and risk assessment to reduce fraud while improving user experiences. The discussion will highlight emerging threats, evolving regulatory expectations, and practical strategies for deploying identity solutions at scale. Attendees will gain actionable insights to protect customers, patients, and their organizations without adding friction.</p></body>

<body>This segment is sponsored by LexisNexis Risk Solutions. Visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/lexisnexisidv">https://securityweekly.com/lexisnexisidv</a> to learn more about them!</body>

<body><p>This segment is sponsored by LexisNexis Risk Solutions. Visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/lexisnexisidv">https://securityweekly.com/lexisnexisidv</a> to learn more about them!</p></body>

Featured image for {“vendor”:”ppworks”,”type”:”segment”,”id”:”14924″} podcast from PPWorks

DevSecOps

AI benefits/risks

Hungry? We talk Smoked Meat, Poutine, and Bagel – also, Identiverse Interviews! – François Proulx, John Pritchard, Cassie Christensen, Jaime Lewis-Gross, Kim Brown – ESW #467

MacOS logo (Mac OS X), an operating system developed by Apple Inc., displayed on a MacBook Pro screen

Endpoint/Device Security

Related Videos

How EDR was supposed to help with alert overload

Patch management in the age of work-from-home

Windows bind links exploited for EDR evasion

Old Microsoft-signed UEFI applications can bypass Secure Boot

Fortinet enhances endpoint security with AI monitoring and data loss prevention

Why Endpoint Hardening Still Fails in Mature Security Programs

How to Build an Endpoint Hardening and Exposure Management Program

Hungry? We talk Smoked Meat, Poutine, and Bagel – also, Identiverse Interviews! – François Proulx, John Pritchard, Cassie Christensen, Jaime Lewis-Gross, Kim Brown – ESW #467

macOS attack technique bypasses endpoint security tools

GhostTree technique uses NTFS junctions to evade security scans

Fast Five

Selected by the SC Media Editorial team every Tuesday.