Identity & Access Management

From Benign Commas to Root Shells: How a Tiny Parsing Quirk Became a 15-Year Trap Seasoned defenders call it the most humbling kind of bug: one stray comma in a principal field that lets a valid SSH certificate unlock root while logs nod along as if nothing unusual happened. Across security teams,

Boardrooms cheered record AI rollouts while basic safeguards frayed, and attackers quietly slipped through reopened cracks. The tension between speed and security was no longer theoretical; it was surfacing in real incidents where sanctioned AI projects stumbled on fundamentals long considered

Malik Haidar has spent years in the trenches of multinational security, closing the distance between boardroom priorities and frontline incident response. He treats identity not just as a login but as a living system spanning humans, non-human services, and fast-moving agentic AI. In this

A Breach That Started With a Build One routine command at a terminal—npm install—had quietly become a launchpad for theft, persistence, and lateral movement that traveled farther than most developers ever expected their tools could carry. Researchers at Socket reported a live campaign hiding inside

Janine Saintos sits down with Malik Haidar, a cybersecurity expert known for bridging business priorities with rigorous threat intelligence. He unpacks how a dataset connected to roughly 500,000 research volunteers surfaced abroad, what moved the needle in the first 24 hours, and how a UK-hosted,

Bugs that once hid for months now surface in hours as AI tears through codebases, configs, and clouds, collapsing the gap between discovery and attack while regulators recalibrate what counts as reasonable security. That shift is not abstract; it is operational, legal, and commercial all at once.