Search
Found 2 articles
Evidence
Credentials and AD Concepts: The Most Critical Link in the Attack Chain, Explained Plainly
Why do attackers fixate on the step of "obtaining the administrator password"? Kerberos, hashes, pass-the-hash, lateral movement — these terms appear constantly in security reports yet are rarely explained. This article unpacks the conceptual layer with everyday analogies, and why credential isolation is the highest-return defensive investment.
2026/10/11 · Credential Security · Active Directory · Authentication
Evidence
Zero Trust Architecture: Not a Product Purchase but a Change of Assumption
In vendor decks, "zero trust" often becomes a product name; fundamentally it is only a change of assumption — no longer assuming the inside is safe. This article unpacks three core principles, four implementation layers, five common misconceptions, and why it is the same work as credential governance and insider threat management.
2026/10/11 · Zero Trust · Architecture · Authentication