Blog Posts

  • 5 Strategies for Setting the Right Cybersecurity KPIs

    5 Strategies for Setting the Right Cybersecurity KPIs

    Cybersecurity key performance indicators (KPIs) measure the efficacy of an organization’s cybersecurity program. In a rapidly changing threat landscape characterized by new identities,...

    Read Blog
  • A Brief History of Game Cheating

    A Brief History of Game Cheating

    Over the short span of video game cheating, both cheaters and game developers have evolved in many ways; this includes everything from modification of important game variables (like health) by...

    Read Blog
  • Double Dipping Cheat Developer Gets Caught Red-Handed

    Double Dipping Cheat Developer Gets Caught Red-Handed

    Following our post “A Brief History of Game Cheating,” it’s safe to say that cheats, no matter how lucrative or premium they might look, always carry a degree of danger. Today’s story revolves...

    Read Blog
  • Mission Possible: Securing Developer Access, CI/CD and Code (With Love)

    Mission Possible: Securing Developer Access, CI/CD and Code (With Love)

    Okay, so you’re a security leader at your enterprise – congratulations! It’s a big, challenging role, as you know too well. You or a colleague are likely responsible for securing the cloud and...

    Read Blog
  • CIO POV: Rethinking Data Security Post-Snowflake Customer Attacks

    CIO POV: Rethinking Data Security Post-Snowflake Customer Attacks

    Watching the recent Snowflake customer attacks unfold felt a bit like rewatching a horror movie with predictable attack sequences and missed opportunities to run to safety. But this time, the...

    Read Blog
  • Identity Crisis: The Curious Case of a Delinea Local Privilege Escalation Vulnerability

    Identity Crisis: The Curious Case of a Delinea Local Privilege Escalation Vulnerability

    During a recent customer engagement, the CyberArk Red Team discovered and exploited an Elevation of Privilege (EoP) vulnerability (CVE-2024-39708) in Delinea Privilege Manager (formerly Thycotic...

    Read Blog
  • How to Bypass Golang SSL Verification

    How to Bypass Golang SSL Verification

    Golang applications that use HTTPS requests have a built-in SSL verification feature enabled by default. In our work, we often encounter an application that uses Golang HTTPS requests, and we have...

    Read Blog
  • What ‘Passwordless’ Really Means for Privileged Access Management

    What ‘Passwordless’ Really Means for Privileged Access Management

    Privileged access management (PAM) programs aim to secure the highest-risk access in an organization, including using privileged credentials like passwords, SSH keys and application secrets. So,...

    Read Blog
  • Why Implementing Identity Security Doesn’t Have to Be Complicated

    Why Implementing Identity Security Doesn’t Have to Be Complicated

    Every organization is different, with its own unique needs, challenges and goals. That means that IT solutions, and especially IT security, must be complex tools that are highly configurable and...

    Read Blog
  • The Current State of Browser Cookies

    The Current State of Browser Cookies

    What Are Cookies When you hear “cookies,” you may initially think of the delicious chocolate chip ones. However, web cookies function quite differently than their crumbly-baked counterparts....

    Read Blog
  • Serving Secure Access: Inside the Privileged Access Ice Cream Parlor

    Serving Secure Access: Inside the Privileged Access Ice Cream Parlor

    Imagine standing in your favorite ice cream parlor, gazing at myriad flavors chilling behind the counter. The choices are tantalizing, from traditional vanilla and chocolate to a swirl of the two....

    Read Blog
  • You Can’t Always Win Racing the (Key)cloak

    You Can’t Always Win Racing the (Key)cloak

    Web Race Conditions – Success and Failure – a Keycloak Case Study In today’s connected world, many organizations’ “keys to the kingdom” are held in identity and access management (IAM) solutions;...

    Read Blog
  • Identity Security: The Keystone of Trust

    Identity Security: The Keystone of Trust

    A few weeks ago, my wife asked me why stopping threat actors from impacting our lives is so difficult. In this digital age, the necessity to connect online brings inherent exposure to...

    Read Blog
  • Cloud Migration Simplified: SaaS Secrets and PAM Strategy

    Cloud Migration Simplified: SaaS Secrets and PAM Strategy

    In the era of rapid digital transformation, organizations are prioritizing cloud transformation projects to enhance their operational agility, scalability and cost efficiency. However, this shift...

    Read Blog
  • Financial Highwire: The Critical Role of Identity Security in Finance

    Financial Highwire: The Critical Role of Identity Security in Finance

    In the highwire act of the financial services sector, identity security serves as the essential safety net, meticulously engineered to intercept any missteps before they precipitate a fall. Just...

    Read Blog
  • CIO POV: Building Resilience in a Complex Threat Landscape

    CIO POV: Building Resilience in a Complex Threat Landscape

    As a CIO, I often wish for a world where the threat landscape is less expansive and complicated than it is today. Unfortunately, the reality is quite different. This month, I find myself...

    Read Blog
  • Securing a Lifeline: Why Identity Security is Paramount in Healthcare

    Securing a Lifeline: Why Identity Security is Paramount in Healthcare

    In the intricate healthcare ecosystem, cybersecurity is akin to the human immune system – a vital defense that safeguards the body from external and internal threats. Healthcare cybersecurity is...

    Read Blog
  • Operation Grandma: A Tale of LLM Chatbot Vulnerability

    Operation Grandma: A Tale of LLM Chatbot Vulnerability

    Who doesn’t like a good bedtime story from Grandma? In today’s landscape, more and more organizations are turning to intelligent chatbots or large language models (LLMs) to boost service quality...

    Read Blog
  • Triage Your Cloud Security: Risk Prioritization Methods

    Triage Your Cloud Security: Risk Prioritization Methods

    It’s a familiar post-disaster scene in seemingly every television medical drama. A ferry has crashed, or a train has derailed. Patients flood into the ER, each requiring urgent medical attention....

    Read Blog
  • Synchronized Swimming: The Relationship Between Privacy and Cybersecurity Teams

    Synchronized Swimming: The Relationship Between Privacy and Cybersecurity Teams

    Data theft, data protection and the leakage of passwords or secrets are the top two cloud security concerns for 2,400 cybersecurity experts, according to the recently released CyberArk 2024...

    Read Blog
  • loading
    Loading More...