December 18, 2025
Real-World Lessons
TruffleNet and Cloud Abuse at Scale: An Identity Architecture Failure
The recent TruffleNet campaign, first documented by Fortinet, highlights a familiar and uncomfortable truth for security leaders: some of the most damaging cloud attacks aren’t exploiting zero-day vulnerabilities. They’re exploiting identity models that were never designed for the scale and automation of modern cloud environments. Nothing about this attack was novel. That’s precisely the problem. …
December 15, 2025
AI
Your AI Agents Aren’t Hidden. They’re Ungoverned. It’s time to Act
November 24, 2025
AI
AI Attack Automation Is Here. And It’s Coming for Your Credentials.
November 13, 2025
Company
Defakto Security Named a 2025 Gartner® Cool Vendor™ in Identity-First Security
November 12, 2025
Uncategorized
AI, SPIFFE, and the Rise of Non-Human Identity: Takeaways from Workload Identity Day 0
November 7, 2025
Real-World Lessons
From Reaction to Resilience: Why Breaches Keep Repeating Themselves
October 21, 2025
Company
Defakto Secures $30.75 M Series B to Set a New Standard in Non-Human Identity Security
October 11, 2025
Company
Introducing Defakto: The Future of Non-Human Identity Security
September 29, 2025
Identity
Authentication is not Authorization: Why treating them as the same breaks your security model
September 17, 2025
Real-World Lessons
Shai-Hulud npm Supply Chain Attack: Why Secrets Fueled the Worm
September 2, 2025
Real-World Lessons
From OAuth Tokens to API Keys: The Toxic Data Behind the Salesloft Drift / Salesforce Breach
August 18, 2025
AI
MFA vs Multi-Attestation: Why AI Needs a New Identity Model
August 5, 2025
Identity