#you


The Exploit Doesn’t Exist. You Can Still Prove It Works Against You

Jun 23, 2026 // 17:16

For thirty years, vulnerability management has run on what now looks like an impossible luxury: a buffer of months between when a vulnerability was found […]

UK to require ID or face scan before you can make social media accounts

Jun 16, 2026 // 17:57

The UK government will ban under-16s from social media, with regulations due before Christmas and the rules taking effect in spring 2027. To enforce it, […]

New FROST Attack Lets Websites Track What Sites and Apps You Open via SSD Timing

Jun 9, 2026 // 14:07

A malicious website can work out which sites you visit and which apps you open, using nothing but JavaScript and the timing of your SSD. […]

Can you enforce strong Active Directory password rules without frustrating users?

May 27, 2026 // 17:16

Protecting Active Directory (AD) accounts starts with strong password policies, backed by consistent enforcement across the organization. However, make the rules too weak and you […]

Agent AI is Coming. Are You Ready?

May 20, 2026 // 15:00

On May 19th, 2026, Orchid Security released the results of our Identity Gap: Snapshot 2026. Among the findings, “identity dark matter” (the unseen, unmanaged elements […]

What 45 Days of Watching Your Own Tools Will Tell You About Your Real Attack Surface

May 15, 2026 // 14:05

In Your Biggest Security Risk Isn’t Malware — It’s What You Already Trust, we made a simple argument: the most dangerous activity inside most organizations […]

Your AI Agents Are Already Inside the Perimeter. Do You Know What They’re Doing?

May 6, 2026 // 14:14

Analysts recently confirmed what identity security teams have quietly feared: AI agents are being deployed faster than enterprises can govern them. In their inaugural Market […]

Regular Password Resets Aren’t as Safe as You Think

Apr 23, 2026 // 20:18

Research from Forrester estimates that every password reset costs around $70. As one of the most common helpdesk requests, many organizations have introduced self-service password […]