#why


Why CISOs Struggle to Answer the Board’s Three Hardest Questions, and How to Fix the Report

Oct 2, 2026 // 14:39

The quarterly board meeting is two weeks out. The security team is pulling exports from the identity provider, the cloud posture tool, the vulnerability scanner, […]

Attack Chains, Not Just Attack Surfaces: Why Testing Individual Techniques Misses the Point

Sep 15, 2026 // 14:30

Security teams have gotten pretty good at testing against what can hurt them. Can this EDR agent catch this payload? Will my organization fail the […]

Why Patch Automation Needs Brakes, Not Just an Accelerator

Sep 14, 2026 // 17:16

Author: Gene Moody, Field CTO at Action1 Patch management has a speeding problem. The pace at which software changes is increasing, while the time available […]

Why Even the Best Edge Security Still Misses High-Risk Sessions

Sep 1, 2026 // 19:17

Security teams have more edge controls at their disposal than ever, and each plays an important role. Yet, despite the best request inspection, credential validation, […]

Key Reasons Why Identity Fabric Matters in 2026

Aug 28, 2026 // 14:30

An Identity Fabric knits fragmented identity systems into a coherent layer that observes how identities behave across applications, APIs, and infrastructure. As enterprise access spans […]

The Outsized Shadow: Why 5% of AI Users Are Your Biggest Security Risk

Aug 24, 2026 // 14:33

Big security risks come in small packages. While enterprise security teams focus on policing the proliferation of employees using ChatGPT and Claude for quick drafting […]

Why “Shady AI” is Security’s Next Big Governance Problem

Aug 20, 2026 // 14:49

In March 2026, an internal AI agent at Meta triggered a “Sev 1” incident after sensitive company and user data was exposed to employees who […]

6 Reasons Why Device Code Phishing is the Fastest-Growing Threat of 2026

Aug 3, 2026 // 09:35

Device code phishing – the abuse of the OAuth 2.0 device authorization grant to steal access tokens – has evolved from a niche red-team technique […]

6 Reasons Why Device Code Phishing is the Fastest-Growing Threat of 2026

Aug 3, 2026 // 09:15

Device code phishing – the abuse of the OAuth 2.0 device authorization grant to steal access tokens – has evolved from a niche red-team technique […]

6 Reasons Why Device Code Phishing is the Fastest-Growing Threat of 2026

Aug 3, 2026 // 08:55

Device code phishing – the abuse of the OAuth 2.0 device authorization grant to steal access tokens – has evolved from a niche red-team technique […]

1 2 3 … 6 Next