Technical articles, standards guidance, and community insight on IAM, PAM, and Zero Trust.
FIDO & PasskeysThe Challenge The FIDO Alliance built FIDO2 on asymmetric cryptography that quantum computers will inevitably break. The standard relies on elliptic curve cryptography (ECC) and RSA for public-key ope
generalThe Conventional Wisdom There s a push for post-quantum cryptography (PQC) adoption. Security leaders are urged to migrate to NIST s FIPS 203-205 standards now, before quantum computers compromise RSA
FIDO & PasskeysDeploying FIDO2 and passkeys across your enterprise requires more than vendor promises and pilot programs. You need a clear path from initial assessment to production rollout, considering authenticati
Passwords & HashingThe Conventional Wisdom Security leaders often hear that passkeys will eliminate passwords, stop phishing, and provide seamless authentication. The FIDO Alliance promotes this vision, and with Dashlan
Get weekly security insights and compliance updates delivered to your inbox.
FIDO & PasskeysDeploying passkeys can be challenging with all the vendor documentation and FIDO2 specs. This checklist provides clear steps to ensure a smooth rollout before, during, and after deployment. This guide
FIDO & PasskeysSingapore s deployment numbers tell a striking story: 80% awareness, 65% adoption, and one in seven consumers who ve experienced a breach in the past year. The FIDO Alliance reports 5 billion passkeys
Privileged AccessThe Conventional Wisdom Attend any security conference in 2026, and you ll hear it: Privileged Access Management (PAM) is the cornerstone of Zero Trust architecture. It s in vendor presentations, anal
Governance & ComplianceYour Cybersecurity Framework (CSF) was created before generative AI became a staple on every developer s desktop, before agentic systems began making autonomous decisions, and before your Security Ope
Authorization ConceptsYour organization likely runs AI agents today. They re summarizing tickets, updating records, calling APIs, and reading sensitive data. The question isn t whether to secure them. It s how you authenti
Governance & ComplianceIf you re running a digital identity verification service in the UK, you need to understand a critical development. Kantara Initiative is now the first Conformity Assessment Body (CAB) accredited unde
OAuth & OIDCScope This guide explores OpenID Connect Key Binding, a proposed Implementer s Draft under review by the OpenID Foundation . We ll discuss what the specification addresses, how it differs from existin
Tokens & SessionsThe Problem: Why This Matters Now On March 24, 2026, threat actors pushed malicious updates to LiteLLM , a gateway tool that lets developers call over 2,000 language models from more than 100 provider
FIDO & PasskeysOpenAI s September 1 deadline for hardware-backed passkeys in its Trusted Access for Cyber program isn t just policy housekeeping. It s a critical shift for organizations handling sensitive capabiliti
FIDO & PasskeysYou ve read the headlines. Passkeys eliminate phishing. They re faster than passwords. They re the future. If you re a CISO or IAM architect, you re probably already fielding questions about when your
