300+ Fake Banking Domains. One Fundamental Question: Who Authenticates the Bank?
A bank-impersonation campaign raises a customer-side question: how do we establish a service’s legitimacy before responding to it?
Identity Security
Cloud Security’s Biggest Threat Isn’t Where You Think. It’s Who You Trust.
As identity and access management emerge as leading cloud security concerns, AI agents and machine identities are forcing organizations to rethink authentication, authorization, and Continuous Trust.
Nobody Buys Authentication. They Buy What Trust Makes Possible.
Inspired by Steve Jobs, Eusebio Coterillo explores why cybersecurity must focus on human outcomes, purposeful approval and practical digital trust.
AI Is Changing Cybersecurity. Identity Is Becoming the Trust Layer.
As humans, machines and autonomous agents increasingly interact on our behalf, authentication can no longer be treated as a single moment in time. Trust must be established, verified and continuously evaluated.
When the Browser Lies: Why Seeing Is No Longer Believing
Browser-in-the-Browser attacks can fake trusted signals. Learn why authentication must verify the destination as well as the user.
The Wrong Website Is Asking the Right Person to Authenticate
We have spent decades improving how users prove who they are. A new phishing technique raises a much more uncomfortable question: Why doesn’t the destination have to prove itself too?
Can Trust Become a Revenue Strategy in the Age of AI?
We usually talk about AI trust as a way to manage risk. I think that misses half the opportunity. In an increasingly artificial world, knowing who and what you can trust may become part of the value customers are actually willing to buy.
Passkeys Weren't Broken. Our Assumptions About Trust Were.
New research into passkey attacks reveals why phishing-resistant authentication is an important advance, but cannot be the end of the identity-security conversation.
When a Legitimate Login Becomes Part of the Attack
The most dangerous attack may not be the one that breaks authentication. It may be the one that uses legitimate authentication to convince you everything is safe.
MFA Was Supposed to Fix Authentication. Attackers Are Proving Otherwise.
We keep adding layers to protect a fundamentally vulnerable authentication model. Perhaps it is time to change the model.