300+ Fake Banking Domains. One Fundamental Question: Who Authenticates the Bank?
A bank-impersonation campaign raises a customer-side question: how do we establish a service’s legitimacy before responding to it?
Digital Trust
5.7 Million People. One Stolen Credential. The Dangerous Assumption Behind Digital Trust.
When stolen credentials open the door to sensitive information, we need to ask two questions: Who are we letting in, and what are we allowing them to do once they're inside?
When Should an AI Agent Need a Human Approval Checkpoint?
Define agent authority, held operations and meaningful human decisions without confusing authentication with permission.
What Is Verifiable Identity? Evidence, Context and Digital Trust
Separate identity evidence, account authentication, permissions and human decisions when evaluating digital trust.
One AUTH Is Not Enough
Authentication verifies identity; authorization limits actions. Eusebio Coterillo examines ChoicePoint, Denmark, MGM and AI-agent authority, with primary sources.
Cloud Security’s Biggest Threat Isn’t Where You Think. It’s Who You Trust.
As identity and access management emerge as leading cloud security concerns, AI agents and machine identities are forcing organizations to rethink authentication, authorization, and Continuous Trust.
Nobody Buys Authentication. They Buy What Trust Makes Possible.
Inspired by Steve Jobs, Eusebio Coterillo explores why cybersecurity must focus on human outcomes, purposeful approval and practical digital trust.
AI Is Changing Cybersecurity. Identity Is Becoming the Trust Layer.
As humans, machines and autonomous agents increasingly interact on our behalf, authentication can no longer be treated as a single moment in time. Trust must be established, verified and continuously evaluated.
When the Browser Lies: Why Seeing Is No Longer Believing
Browser-in-the-Browser attacks can fake trusted signals. Learn why authentication must verify the destination as well as the user.
The Wrong Website Is Asking the Right Person to Authenticate
We have spent decades improving how users prove who they are. A new phishing technique raises a much more uncomfortable question: Why doesn’t the destination have to prove itself too?