Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Is autofill safe? Clickjacking risks and security tradeoffs explained

When new security research hits the headlines, it often sparks a predictable wave of worry: should we turn off features we rely on? Should we rethink basic workflows? That’s exactly the case with recent findings that highlight how clickjacking techniques can exploit password manager autofill behavior.

EP 15 - Why banks need to treat machine identities like VIPs

In this episode of Security Matters, host David Puner speaks with Andy Parsons, CyberArk’s Director of EMEA Financial Services and Insurance, whose career spans from the British Army to CISO and CTO roles in global financial institutions. Andy shares hard-earned lessons on leadership, risk management, and the evolving cybersecurity landscape in banking—from insider threats to machine identity governance and the rise of agentic AI.

Multiple Login & Access Solutions for Headless Shopify Stores

Discover how to simplify and secure authentication for Shopify Hydrogen storefronts. Learn how single sign-on (SSO), social login, restricted content access, and multi-store sync can deliver a unified, user-friendly experience, powered by miniOrange’s scalable authentication solutions.

EP 15 - Why banks need to treat machine identities like VIPs

In this episode of Security Matters, host David Puner speaks with Andy Parsons, CyberArk’s Director of EMEA Financial Services and Insurance, whose career spans from the British Army to CISO and CTO roles in global financial institutions. Andy shares hard-earned lessons on leadership, risk management, and the evolving cybersecurity landscape in banking—from insider threats to machine identity governance and the rise of agentic AI.
Featured Post

Machines, the Silent Threat Lurking Inside the Enterprise

The digital enterprise is no longer primarily made up of individuals' identities. According to Gartner, over 60% of all identities in a typical organization are non-human. These Non-Human Identities (NHIs) are digital identities assigned to software, services, applications, containers, or devices that require access to systems and data. Unlike human identities, NHIs operate autonomously, at scale, and often with high privilege. This makes them essential for modern automation and uniquely vulnerable to misuse.

Why secret sprawl may be your biggest security threat (and how to help fix it)

Picture this: You’re having your morning coffee when your phone buzzes with the kind of alert that makes security professionals break into a cold sweat. A single API key, leaked on GitHub months ago, has just given attackers a VIP pass to your entire infrastructure. Sound familiar? It should. The 2024 U.S. Treasury breach started exactly this way. One compromised machine identity opened the floodgates.

Flexible Login Options for Shopify B2B - SSO, Social Login & More

Struggling with login restrictions on Shopify B2B stores? Learn how to enable custom authentication for Shopify B2B customers and support multiple login methods (Email-Password, Phone-OTP Login, Social Login, Single Sign-On, etc.) for Shopify Customer Accounts with miniOrange solutions.
Featured Post

Manufacturing's Hidden Cyber Threat: The Growing Danger of Unsecured Machine Identities

The wave of smart manufacturing is sweeping across the industry, bringing with it a seismic shift that is characterized by hyper-connectivity, relentless automation and unprecedented data-driven precision. However, manufacturing plants and factories are not just filled with machines; they're teeming with thousands of non-human identities (NHIs) from robotic arms and programmable logic controllers (PLCs) to IoT and IIoT sensors seamlessly integrated through the production lines. While they drive operational efficiency, they also represent a rapidly expanding and often invisible attack service.