Sign in Subscribe

Topic

Cyber Security

Let's talk about how to protect your business

A new approach to JWT revocation

Revoking JWT sessions without blacklists? Embed a user-specific secret in tokens via a signed JTI claim (`sjti`). Validate first with your app secret, then the user’s secret. Rotate their secret to revoke all sessions instantly. Secure, scalable, and stateless.

Incidente CrowdStrike: Lições de Segurança de Fornecedores

O incidente da CrowdStrike destacou a importância de fornecedores de TI fiáveis. Uma atualização de software causou uma interrupção global, expondo vulnerabilidades. Isso sublinha a necessidade de selecionar fornecedores com cuidado e mitigar riscos na segurança cibernética.

Vendor Security Lessons from the CrowdStrike Incident

The CrowdStrike incident underscores the need for reliable IT security vendors after a problematic update caused a global outage. This article examines the incident's impact on sectors like banking and healthcare and discusses strategies for mitigating vendor-related risks.