Spring is the perfect time to plan your garden, and I need all the help I can get with these discounted gardening gadgets during Amazon's Big Spring Sale.
A long-term and ongoing campaign attributed to a China-nexus threat actor has embedded itself in telecom networks to conduct espionage against government networks.
The strategic positioning activity, which involves implanting and maintaining stealthy access mechanisms within critical environments, has been attributed to Red Menshen, a threat cluster that's also tracked as Earth Bluecrow,
Portable wind generators promise clean energy in windy conditions, but how do they stack up against the proven reliability and efficiency of portable solar panels?
Amazon's Spring Sale is live, and we've got the scoop on the top products ZDNET readers are clicking on the most, from inexpensive gadgets to flagship phones.
In enterprise environments, identity effectively became the control plane once network perimeters broke down (e.g. zero trust, et cetera).
I’m seeing a similar pattern emerging on the public internet via age verification and safety regulation, but with identity moving closer to the access layer itself.
Not just: “Are you over 18?”
But: identity assertions are becoming part of how access is granted at the OS/device/app store level.
From a security perspective, this seems to introduce some new attack surfaces:
high-value identity tokens at the OS/device level
new trust boundaries between apps, OS, and third-party verifiers
incentives to target device compromise or token reuse rather than account-level bypass
potential centralisation of identity providers as enforcement points
Questions I’m trying to think through:
Does this effectively make identity providers the new perimeter/control plane?
How would you model this system (closer to DRM, identity federation, or something else?)
What are the likely failure modes if this layer becomes centralised?
Are decentralised / on-device credentials actually viable from a security standpoint, or do they just shift the attack surface?
Curious how people here would threat model this or where the obvious breakpoints are.
The Telegram-based Xinbi Guarantee black market sells services that help prop up scam operations. British officials just hit the highly lucrative marketplace with sweeping sanctions.
Login
