Real-World Lessons
September 17, 2025
Real-World Lessons
Shai-Hulud npm Supply Chain Attack: Why Secrets Fueled the Worm
September 2, 2025
Real-World Lessons
From OAuth Tokens to API Keys: The Toxic Data Behind the Salesloft Drift / Salesforce Breach
July 31, 2025
Real-World Lessons
Wiz’s Base44 Vulnerability Findings Spotlight a Fixable Gap: Non-Human Identity
July 16, 2025
Real-World Lessons
Another Day, Another Leaked API Key — This Time, It’s xAI
July 11, 2025
Real-World Lessons
McDonald’s McHire Breach Shows Why APIs Need Non-Human Identity and Strong Auth
June 19, 2025
Real-World Lessons
Asana’s MCP Bug Wasn’t Unique — It Was a Sign of What’s Coming
May 2, 2025
Real-World Lessons
Grok’s Key Leak Proves It: Static Secrets Don’t Belong in Code
March 4, 2025
Real-World Lessons