Resources
Aembit vs. DIY Workload Identity and Access: What Breaks at Scale
10 min readModern infrastructure runs on workloads: microservices, data pipelines, CI/CD jobs, serverless functions, containers, and increasingly, autonomous AI agents. Every one of these workloads needs to authenticate to something, whether a ...
Introducing the Identity and Access Gaps in the Age of Autonomous AI Survey Report
2 min readThe Trivy incident exposed a credential architecture failure, not just a supply chain one. Here’s the case for workload identity and access. The post Introducing the Identity and Access Gaps ...
Agentic AI Security Starter Kit: Where Autonomous Systems Fail and How to Defend Against It
4 min readMany teams are approaching agentic AI with a mixture of interest and unease. Senior leaders see clear potential for efficiency and scale. Builders see an opportunity to remove friction from ...
We’ve Identified a New IT Ailment. It’s Called Credentialitis – And It’s Spreading Fast
2 min readCredentialitis isn’t just a clever name. It’s a real condition plaguing modern IT teams. Dr. Seymour Keys is here to walk you through the symptoms, the screening, and the treatment ...
The Definitive Catch-Up Guide to Agentic AI Authentication
11 min readA down-to-earth primer to help engineers make sense of agentic AI architecture and where things stand today. The post The Definitive Catch-Up Guide to Agentic AI Authentication appeared first on ...
eSkimming Security – Driving Bottom Line Results through Fraud Reduction and Revenue Maximization
by Source Defense Even with the PCI DSS 4.0 deadline now behind us, many organizations are still exposed to costly eSkimming threats and compliance gaps. Source Defense recently hosted a webinar to ...
Revenue Risk Hidden in Fly by Night New eSkimming Tools
by Source Defense Don’t Trust Your Online Revenue Channel to Sub-par Solutions for eSkimming Security (Beware the big box “me too” solutions) As PCI DSS 4.0.1 enforcement has driven demand for eSkimming ...
New Breed of Magecart: GTMs Working Together, JavaScript Hidden in CSS
by Source Defense The Source Defense Research team has uncovered another active eSkimming campaign which demonstrates the use of novel techniques, and an increasing adversarial focus on attacking websites with techniques that ...
What QSAs Are Saying About PCI DSS 4.0.1 and eSkimming Controls
by Source Defense On a recent Source Defense roundtable, seasoned QSAs gathered to discuss the latest PCI DSS 4.0.1 updates—specifically requirements 6.4.3 and 11.6.1—and how organizations should respond. What followed was a ...
Client-Side Security Breach Alert: Blue Shield of California Exposes 4.7 Million Members’ Health Data Through Web Analytics Configuration
by Source Defense A recent incident at Blue Shield of California highlights the critical importance of client-side security controls when implementing third-party scripts on healthcare websites. The nonprofit health plan has disclosed ...
