Join 20,000+ security professionals getting weekly breach analysis, threat intelligence, and defensive strategies.
The NYC Health + Hospitals breach exposed 1.8 million people's records — including their fingerprints and palm prints. You can reset a password. You can't reset a hand. Why healthcare's biometric data is the worst thing to lose.
20,000+ security and IT professionals read Unlocked every week. Join them — free, no spam.
In one week, Accenture, Ernst & Young, and Deutsche Bank all turned up in breach claims — and the most valuable thing stolen wasn't files. It was keys. When the firms that certify everyone else's security get hit, the lesson is about what you store, not who you trust.
Identity is the new security perimeter. This guide walks through how IAM works—authentication, authorization, and access control—compares leading platforms, and shows how to fold it all into a Zero Trust strategy.
A one-time password token generates a fresh code for every login, but not all OTPs are equal. Here's how HOTP and TOTP work under the hood, how hardware and software tokens compare, and why passkeys are the next step.
Not all two-factor authentication is created equal. This guide breaks down every 2FA method—from SMS and authenticator apps to hardware security keys and biometrics—and shows which ones actually stop phishing attacks.
Any open switch port is an invitation to attackers. IEEE 802.1X locks those ports down with port-based network access control, authenticating every device before it touches your network.
Basic authentication resends your credentials with every request; form-based authentication swaps them once for a session cookie. That single difference shapes security, MFA support, and logout.
The NYC Health + Hospitals breach exposed 1.8 million people's records — including their fingerprints and palm prints. You can reset a password. You can't reset a hand. Why healthcare's biometric data is the worst thing to lose.
Federated identity attribute mapping decides who gets access to what across SSO. This guide covers SAML assertions, OIDC claims, CEL mapping for Google Cloud, WIF principals, and provisioning.
A one-time password generator turns a shared secret into single-use codes that expire in seconds. This guide covers how TOTP and HOTP work, where OTP breaks under phishing, and how to deploy it securely.
