Join 20,000+ security professionals getting weekly breach analysis, threat intelligence, and defensive strategies.
This week: attacks on water utility PLCs across a dozen states, three research teams defeat phishing-resistant MFA, and a fresh N-able N-central patch bypass fuels new ransomware.
20,000+ security and IT professionals read Unlocked every week. Join them — free, no spam.
This week: attacks on water utility PLCs across a dozen states, three research teams defeat phishing-resistant MFA, and a fresh N-able N-central patch bypass fuels new ransomware.
Audit logs are the first thing a compliance auditor asks for—and the first thing an attacker tries to erase. Here's how to configure IAM audit logging across AWS, GCP, and OCI to satisfy SOC 2, PCI DSS, and FedRAMP.
HHS's Office for Civil Rights settled with software vendor MMG Fusion after a breach exposed the health data of roughly 15 million people — and the tiny fine hides the real lesson for every practice that trusts a third party with patient information.
You can't reset a stolen fingerprint. This guide breaks down how biometric template protection keeps that data safe — using cancelable transforms and cryptosystems — without wrecking matching accuracy.
Phishing kits are now defeating multi-factor authentication at scale — hijacking fully MFA-verified Microsoft 365 logins without ever touching a password. Why the second factor you trust isn't the finish line, and what actually resists phishing.
Manual account setup slows onboarding and opens security gaps. See how just-in-time (JIT) provisioning automates user access at first login, enforces zero-trust, and trims SaaS licensing costs enterprise-wide.
You can't reduce privilege you can't see. Learn to run local admin rights discovery safely with ServiceNow MID Server, JEA, and GPO-based methods, then move toward a zero standing privilege model.
Identity governance is the control plane for enterprise access. This guide explains what IGA is, how it differs from IAM, and how it strengthens security, compliance, and zero-trust across cloud and on-prem systems.
Not all authenticator apps are equal. Compare the best third-party authentication apps of 2026, including Ente Auth, Aegis, Microsoft Authenticator, Zoho OneAuth, and EveryKey, on backup security and encryption.
