Topic: zero trust architecture
-
Zero Trust Security Requires Edge-Based Trust Decisions
Zero trust for physical security systems requires distributed trust with centralized governance, where policy decisions are made centrally but enforced locally at the edge (e.g., door controllers) to meet tight latency constraints like 200-millisecond unlock times. Organizations risk slowly drift...
Read More » -
Versa brings zero trust security to AI agents and MCP workflows
Versa has launched a patent-pending zero trust architecture for the Model Context Protocol (MCP), which validates every AI action against user identity, role-based access, and system policies, with optional human approval. This framework, embedded within Versa Verbo and integrated with the VersaO...
Read More » -
Zero Trust: Slash Cyber Risk and Insurance Claims
Businesses in Australia and Oceania are facing a sharp rise in sophisticated cyberattacks, and adopting a Zero Trust security architecture can significantly reduce both the frequency and financial impact of these incidents. Research shows that implementing Zero Trust could have prevented up to 42...
Read More » -
Device Security Must Share the Load Beyond Identity
Identity verification alone is no longer sufficient for security, as AI-powered phishing, credential theft, and session hijacking allow attackers to bypass authentication and steal session tokens even after MFA succeeds. Zero Trust frameworks like NIST 800-207 warn against relying on implied trus...
Read More » -
HPE boosts security for AI and distributed enterprises
HPE is launching new security products, including the SRX400 Series Firewalls and updates to its hybrid mesh architecture, to provide standardized, resilient protection from core to edge for enterprises adopting AI and distributed operations. A key focus is securing distributed sites with AI-nati...
Read More » -
AI Agents Surge 10:1 – Time to Rethink Enterprise IAM
The rapid rise of AI agents is overwhelming traditional identity and access management (IAM) strategies, with stolen credentials remaining a top cause of data breaches and AI workflows making identity the new cybersecurity frontline. Proximity-based authentication (e.g., Bluetooth Low Energy and ...
Read More » -
Beyond Credentials: Why Device Trust Matters in the AI Era
AI has accelerated identity-based attacks by making phishing, credential theft, and MFA bypass faster and more scalable, while traditional trust signals like IP reputation and geolocation are now easily spoofed by attackers using residential proxies and rotating identities. Device trust is emergi...
Read More » -
Firewalla's Zero Trust Fix for Flat Home Networks
Firewalla's AP7 and Orange devices modernize outdated home networks by applying zero trust principles and microsegmentation, allowing for organized, secure segmentation without changing IP addresses or reconfiguring every device. This approach addresses the security and performance issues of flat...
Read More » -
Proven Strategies for Long-Lasting IoT Devices
A strategic IoT security approach must balance compliance, visibility, and future-proofing, focusing on compliant infrastructure, device management, and emerging tech like AI and quantum computing. Visibility challenges in IoT stem from outdated devices lacking security protocols, necessitating r...
Read More » -
New infosec products launched this week: July 17, 2026
Polygraf AI Meeting Guard provides real-time deepfake detection for enterprise meetings by joining as a visible participant, identifying AI-generated content and verifying voices without external data transmission. Nudge Security introduced new agentic capabilities that automatically detect and r...
Read More » -
NIST, CISA Finalize Playbook to Stop Token Theft
NIST and CISA have released finalized guidelines to help federal agencies and cloud providers defend against the forgery, theft, and misuse of identity tokens through improved key management and verification processes. The framework outlines distinct security responsibilities for cloud providers,...
Read More » -
Can Your Phishing Detection Stop 2025's Security Threats?
Social engineering attacks like Clickfix surged 500% in early 2025, with cybercriminals increasingly using AI to create sophisticated Business Email Compromise scams that exploit human psychology rather than technical vulnerabilities. Clickfix bypasses traditional defenses by tricking users into ...
Read More » -
Cisco IMC patch, Patch Tuesday outlook, Black Hat 2026 recap
AI-powered security tools are advancing: Stairwell's Backstory maps full malware campaigns from single alerts (finding ~2.4 undocumented variants per published sample), while Stellar Cyber's Agentic Auto Triage autonomously closes false-positive tickets, saving analysts 19 minutes per hour. New v...
Read More » -
OWASP Project Quantifies Removed Attack Paths
Christopher Frenz launched the OWASP Attack Path Reduction Analysis project to quantify how many specific attack paths are eliminated by implementing security controls, replacing vague assumptions with measurable metrics. The framework maps potential attack paths, recalculates them after a contro...
Read More »