Identity & Access Management

Malik Haidar has spent years in the trenches of multinational security, closing the distance between boardroom priorities and frontline incident response. He treats identity not just as a login but as a living system spanning humans, non-human services, and fast-moving agentic AI. In this

A Breach That Started With a Build One routine command at a terminal—npm install—had quietly become a launchpad for theft, persistence, and lateral movement that traveled farther than most developers ever expected their tools could carry. Researchers at Socket reported a live campaign hiding inside

Janine Saintos sits down with Malik Haidar, a cybersecurity expert known for bridging business priorities with rigorous threat intelligence. He unpacks how a dataset connected to roughly 500,000 research volunteers surfaced abroad, what moved the needle in the first 24 hours, and how a UK-hosted,

Bugs that once hid for months now surface in hours as AI tears through codebases, configs, and clouds, collapsing the gap between discovery and attack while regulators recalibrate what counts as reasonable security. That shift is not abstract; it is operational, legal, and commercial all at once.

Windows RPC Trust Boundaries, Market Actors, and Why PhantomRPC Resonates Now When privileged Windows clients reach for familiar RPC servers that happen to be missing, the runtime’s willingness to accept a substitute responder can turn a routine call into an identity handoff that elevates l

The conventional wisdom that digital security begins and ends at the email gateway is rapidly becoming an obsolete relic of a less sophisticated era in cybersecurity history. As organizations have successfully fortified their perimeter defenses against traditional phishing attempts, threat actors