One AUTH Is Not Enough
Authentication verifies identity; authorization limits actions. Eusebio Coterillo examines ChoicePoint, Denmark, MGM and AI-agent authority, with primary sources.
Digital Trust
Nobody Buys Authentication. They Buy What Trust Makes Possible.
Inspired by Steve Jobs, Eusebio Coterillo explores why cybersecurity must focus on human outcomes, purposeful approval and practical digital trust.
AI Is Changing Cybersecurity. Identity Is Becoming the Trust Layer.
As humans, machines and autonomous agents increasingly interact on our behalf, authentication can no longer be treated as a single moment in time. Trust must be established, verified and continuously evaluated.
When the Browser Lies: Why Seeing Is No Longer Believing
Browser-in-the-Browser attacks can fake trusted signals. Learn why authentication must verify the destination as well as the user.
The Wrong Website Is Asking the Right Person to Authenticate
We have spent decades improving how users prove who they are. A new phishing technique raises a much more uncomfortable question: Why doesn’t the destination have to prove itself too?
Passkeys Weren't Broken. Our Assumptions About Trust Were.
New research into passkey attacks reveals why phishing-resistant authentication is an important advance, but cannot be the end of the identity-security conversation.
AI Is Not Just Changing Cybersecurity. It Is Changing What We Have to Trust.
Darktrace's 2026 research reveals an industry racing to adopt AI while confronting a much larger question: Who, or what, should be allowed to act?
Why Do I Have to Prove Who I Am, But the Website Doesn't?
For decades, authentication has been built around one question: “Who are you?” In a world of phishing, deepfakes, AI-generated deception and nearly perfect digital impersonation, perhaps it's time we asked the other side the same question.