Join 20,000+ security professionals getting weekly breach analysis, threat intelligence, and defensive strategies.
Ransomware is up 48% even as overall attacks fall — and the targets are shifting to critical infrastructure. The reason isn't just greed. Nation-states have discovered that a criminal crew makes a perfect deniable weapon.
20,000+ security and IT professionals read Unlocked every week. Join them — free, no spam.
Ransomware is up 48% even as overall attacks fall — and the targets are shifting to critical infrastructure. The reason isn't just greed. Nation-states have discovered that a criminal crew makes a perfect deniable weapon.
Forms-based authentication powers over 80% of web logins, but only when built right. This guide covers secure form design, modern password hashing, hardened session cookies, and MFA to keep your login pages safe.
Passwords alone won't stop account takeovers. This guide compares SMS, authenticator apps, hardware keys, and passkeys, then walks through enabling two-factor authentication on Google, Microsoft, and Apple.
API breaches often start with weak authentication. This guide covers modern API authentication best practices—OAuth 2.1, JWTs, mTLS, scopes, and workload identity—to secure your APIs, microservices, and AI agents.
MSPs are prime targets because one breach unlocks dozens of clients. This guide covers IT security for MSPs—RMM hardening, Zero Trust, patching, backups, and framework alignment—to protect your clients and your business.
Passwords can't stop modern credential theft alone. This guide explains what multi-factor authentication really means: NIST assurance levels, the five factors, phishing-resistant methods, and how attackers bypass it.
A self-replicating worm hit 500+ npm and PyPI packages this month — including Red Hat's. It doesn't just poison code; it steals the credentials that let it log in and republish itself everywhere the maintainer has access.
Generative and agentic AI have outpaced traditional GRC tools. AI compliance monitoring shifts governance from annual audits to continuous, API-native oversight that helps enterprises avoid penalties and protect data.
