Join 20,000+ security professionals getting weekly breach analysis, threat intelligence, and defensive strategies.
The NYC Health + Hospitals breach exposed 1.8 million people's records — including their fingerprints and palm prints. You can reset a password. You can't reset a hand. Why healthcare's biometric data is the worst thing to lose.
20,000+ security and IT professionals read Unlocked every week. Join them — free, no spam.
The NYC Health + Hospitals breach exposed 1.8 million people's records — including their fingerprints and palm prints. You can reset a password. You can't reset a hand. Why healthcare's biometric data is the worst thing to lose.
Federated identity attribute mapping decides who gets access to what across SSO. This guide covers SAML assertions, OIDC claims, CEL mapping for Google Cloud, WIF principals, and provisioning.
A one-time password generator turns a shared secret into single-use codes that expire in seconds. This guide covers how TOTP and HOTP work, where OTP breaks under phishing, and how to deploy it securely.
Still relying on text-message codes to secure logins? SMS-based two-factor authentication carries real weaknesses, from SIM-swap fraud to interception. Here's how the attacks work and the stronger options worth adopting.
A June 2 executive order quietly reset the rules: AI-enabled federal cyber defense, new CISA directives within 30 days, and a required Cyber Trust Mark for connected devices. Even if you're not a federal contractor, this is about to shape what you buy and how you defend.
