This technical whitepaper will outline the importance of privileged access management (PAM) controls that are necessary to align with the Defense information Systems Agency (DISA) Zero Trust reference architecture, and why federal agencies need to follow the government’s recommendations for implementing a Zero Trust framework. The CyberArk Identity Security Platform helps enable federal agencies to algin to this framework, and mitigate the risk of advanced cyberattacks.
Recommended for You
CyberArk earns Wiz partner award for advancing cloud identity innovation
Cloud complexity is growing. So are the risks—and the opportunities. As organizations scale their infrastructure across hybrid environments to innovate quickly, security strategies must evolve...
Illusion of control: Why securing AI agents challenges traditional cybersecurity models
Enterprise security teams commonly focus on controlling AI agent conversations through prompt filters and testing edge cases to prevent unauthorized information access. While these measures...
Responding to ToolShell: A Microsoft SharePoint zero-day vulnerability
What is the ToolShell exploit? A newly discovered exploit, “ToolShell,” is fueling a wave of targeted attacks against on-premises Microsoft SharePoint servers. The zero-day exploit chains two...
39:05Break Identity Silos to Maximize Risk Reduction
The advantages of an identity security platform & how to maximize risk reduction by managing and securing identities with appropriate privilege controls.
Modern application control, done right with least privilege
When attackers gain access to a single endpoint—like a developer’s workstation or an HR system—it’s often game over. With some skill and patience, that foothold can escalate into full-blown...
Developers fly the plane: AI guardrails for secure cloud innovation
Developers now chart courses through environments as dynamic and unpredictable as open skies, plotting efficient courses through shifting clouds of technology to reach ambitious goals....
How the 16 billion password leak impacts your security strategy
The June 2025 disclosure that over 16 billion passwords were leaked has raised significant concerns in the digital community. Reports suggest that many of these credentials are recycled from...
The Identity Security Imperative: IT users chapter excerpt
This excerpt from The Identity Security Imperative explores how to secure IT users with intelligent controls—without slowing innovation.
45:55Scattered Spider Tactics Revealed
CyberArk experts uncover Scattered Spider’s latest identity attacks and review how to detect threats and defend against privilege abuse.
Identity security at inception: A CISO’s guide to proactive protection
Modern enterprises are facing an identity explosion. Fueled by cloud adoption, DevOps acceleration, and now agentic AI, the number of human and machine identities is growing faster than most...
Scattered Spider Unmasked: How an identity-focused APT is redefining cyber threats
Scattered Spider has emerged as one of the most disruptive advanced persistent threats in recent years, breaching major organizations across telecom, gaming, transportation, and retail. In the...
The quantum-AI collision: What CISOs must do now to stay ahead
Technology is moving at the speed of light, and two forces—quantum computing and AI agents—are poised to shake up cybersecurity. We’re not talking about some far-off future; this is happening now....
C4 Bomb: Blowing Up Chrome’s AppBound Cookie Encryption
In July 2024, Google introduced a new feature to better protect cookies in Chrome: AppBound Cookie Encryption. This new feature was able to disrupt the world of infostealers, forcing the malware...
How agentic AI could transform enterprise workflows: Insights from MIT GenAI Lab
The line between human and machine is blurring—and it’s not a question of whether machines can do more, but how far we’re willing to let them go. The frontier lies in tackling the chaos and...
Machine identity mayhem: The volume, variety, velocity challenge
Machine identities—like the API keys, certificates, and access tokens that secure machine-to-machine connections—are swarming businesses. Yet, many teams still reach for manual tools while their...
ESG Showcase: Cyber Insurance and Identity: Evolving From Checkboxes to Maturity
Cyber insurance plays an essential and evolving role in a well-rounded cybersecurity strategy for businesses. Improving cyber insurability can not only act as a catalyst to improve an organization’s s
Post-quantum cryptography (PQC): how to build resilience while padlocks still work
This blog is the second part of a two-part series on post-quantum cryptography (PQC). In Part 1, we explored how the Harvest Now, Decrypt Later (HNDL) strategy has moved from crypto-conspiracy...
End-to-End Passwordless Experience
Eliminate passwords and defend against credential-based attacks with a secure, seamless passwordless authentication experience.
This message will self-decrypt in 5 years: why post-quantum prep starts now
This blog is the first part of a two-part series on post-quantum cryptography (PQC). In this piece, we explore why quantum threats are no longer theoretical. In Part 2, we’ll cover practical steps...
