BYD Got Hacked? What Really Happened
If you have seen headlines asking whether BYD got hacked, the short answer is yes, but not by…
12m
TAG
Cybersecurity
Enterprise Passkeys Beyond the Hype
Enterprise passkeys beyond the hype is not a rhetorical framing. It is the actual question every security architect…
16m
Prompt Injection in MCP Servers
Prompt injection in MCP servers has moved from a theoretical concern to a documented attack class in under…
11m
Break Glass Account Best Practices
Most tenant lockouts are not caused by attackers. They are caused by a Conditional Access policy scoped to…
17m
OWASP Top 10 for Agentic Applications
Security teams that spent two years hardening chatbots are now staring at a different problem. The OWASP Top…
10m
Zero Trust for AI Agents in the Cloud
As a security professional who spends most working weeks inside Azure tenants watching automation scale past the point…
14m
Australia Horizon 2 Cyber Strategy
As a security architect working across Australian regulated environments, I have watched the 2023-2030 Australian Cyber Security Strategy…
7m
Non-Human Identity Sprawl
Most security programs were built to protect people. Single sign-on, multi-factor authentication, privileged access management, and quarterly access…
12m
Wiz vs Microsoft Defender for Cloud
After running cloud security posture programmes across a range of organisations, I get asked the wiz vs microsoft defender…
13m
Best Practices to Prevent Prompt Injection Attacks
In June 2025, researchers at Aim Security disclosed EchoLeak, a zero-click vulnerability in Microsoft 365 Copilot tracked as…
14m