[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"control:privileged-access-management":3},{"control":4,"products":25,"stories":65,"lessons":109,"related":134,"compare":155},{"slug":5,"name":6,"problem":7,"summary":8,"business_value":9,"vendor_questions":10,"risk_register":15,"framework_refs":16,"area":21,"updated_at":24},"privileged-access-management","Privileged access management (PAM)","Admin accounts stop being one stolen password away from control of everything.","Vaulting, rotation and just-in-time issue of administrator, service and root credentials, with privileged sessions recorded. Admins get elevated rights only when they need them, for as long as they need them.","Ransomware groups and state actors aim for domain admin, cloud root and backup console accounts, because those turn one foothold into a company-wide outage. PAM shrinks the number of standing admin accounts and makes their use visible, which also answers the auditor's question of who could do what.",[11,12,13,14],"Can it remove standing admin rights with just-in-time elevation, rather than only storing passwords?","Does it cover cloud consoles, service accounts and backup systems, not just servers?","Are privileged sessions recorded and searchable?","What happens if the PAM system itself is down or compromised?","Risk: an attacker gains domain or cloud admin rights and disables defences or backups. Control: PAM with just-in-time elevation and credential rotation. Owner: infrastructure lead. Measure: number of standing privileged accounts.",[17,18,19,20],"NIS2 Art. 21(2)(i): access control policies","DORA Art. 9: access limited to what is required","CIS Controls 5 and 6: account and access control management","ISO\u002FIEC 27001:2022 A.8.2: privileged access rights",{"name":22,"slug":23},"Access Control","access-control","2026-10-16T12:47:55.913203+00:00",[26,34,42,50,57],{"vendor_slug":27,"vendor_name":28,"vendor_logo":29,"product_slug":30,"product_name":31,"url":32,"description":33},"beyondtrust","BeyondTrust","\u002Fvendor-logos\u002Fbeyondtrust.png","password-safe","BeyondTrust Password Safe","https:\u002F\u002Fwww.beyondtrust.com\u002Fproducts\u002Fpassword-safe","Privileged password and session management.",{"vendor_slug":35,"vendor_name":36,"vendor_logo":37,"product_slug":38,"product_name":39,"url":40,"description":41},"delinea","Delinea","\u002Fvendor-logos\u002Fdelinea.png","secret-server","Delinea Secret Server","https:\u002F\u002Fdelinea.com\u002Fproducts\u002Fsecret-server","Vault for privileged credentials with discovery, rotation and session recording.",{"vendor_slug":43,"vendor_name":44,"vendor_logo":45,"product_slug":46,"product_name":47,"url":48,"description":49},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","idira-privileged-access-management","Idira Privileged Access Management","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fidira\u002Fhuman\u002Fprivileged-access-management","Privileged access management from the former CyberArk portfolio: vaulting, rotation, just-in-time access and session monitoring.",{"vendor_slug":51,"vendor_name":52,"vendor_logo":53,"product_slug":5,"product_name":54,"url":55,"description":56},"threatlocker","ThreatLocker","\u002Fvendor-logos\u002Fthreatlocker.png","Privileged Access Management","https:\u002F\u002Fwww.threatlocker.com\u002Fcapabilities\u002Fprivileged-access-management","Gives elevated rights to specific applications only where needed, so users do not need local admin accounts.",{"vendor_slug":58,"vendor_name":59,"vendor_logo":60,"product_slug":61,"product_name":62,"url":63,"description":64},"wallix","WALLIX","\u002Fvendor-logos\u002Fwallix.png","wallix-pam","WALLIX PAM","https:\u002F\u002Fwww.wallix.com\u002Fproducts\u002Fprivileged-access-management-software\u002F","Privileged access management with session recording, for IT and OT environments.",{"total":66,"last_days":67,"recent":68},612,210,[69,74,79,84,89,94,99,104],{"slug":70,"title":71,"published_at":72,"brief":73},"connectwise-suspends-cloud-backup-after-attackers-compromise-microsoft-365-tenan-1a74dd","ConnectWise Suspends Cloud Backup After Attackers Compromise Microsoft 365 Tenants","2026-10-18T08:23:02+00:00","ConnectWise disables cloud backup after attackers compromise Microsoft 365 tenants.",{"slug":75,"title":76,"published_at":77,"brief":78},"hackers-breach-microsoft-365-tenants-via-connectwise-supply-chain-attack-622bd9","Hackers breach Microsoft 365 tenants via ConnectWise supply-chain attack","2026-10-17T15:18:51+00:00","Hackers compromised Microsoft 365 tenants via ConnectWise's Cloud Backup service.",{"slug":80,"title":81,"published_at":82,"brief":83},"cert-in-warns-ai-agents-accessed-sensitive-data-at-indian-organizations-during-t-9e713c","CERT-In Warns AI Agents Accessed Sensitive Data at Indian Organizations During Testing","2026-10-16T06:53:09+00:00","AI agents accessed sensitive data at Indian organizations during testing, CERT-In reports.",{"slug":85,"title":86,"published_at":87,"brief":88},"peerstitch-malware-deployed-via-fortios-flaw-bypasses-checks-on-tagged-vpn-sessi-a2dfa0","PEERSTITCH Malware Deployed via FortiOS Flaw Bypasses Checks on Tagged VPN Sessions","2026-10-16T04:59:36+00:00","PEERSTITCH malware exploits FortiOS flaw to bypass VPN session checks.",{"slug":90,"title":91,"published_at":92,"brief":93},"check-point-reports-litellm-flaws-enabling-admin-takeover-and-api-key-theft-774305","Check Point Reports LiteLLM Flaws Enabling Admin Takeover and API Key Theft","2026-10-14T10:05:23+00:00","LiteLLM vulnerabilities allow admin takeover and API key theft.",{"slug":95,"title":96,"published_at":97,"brief":98},"agent-baseline-publishes-security-reference-architecture-for-software-factories-68c07d","Agent Baseline Publishes Security Reference Architecture for Software Factories","2026-10-13T17:54:48.146+00:00","Agent Baseline releases reference architecture for securing AI-driven software factories.",{"slug":100,"title":101,"published_at":102,"brief":103},"meta-says-hackers-took-code-personal-data-of-1-500-in-github-breach-31360d","Meta Says Hackers Took Code, Personal Data of 1,500 in GitHub Breach","2026-10-13T16:01:00+00:00","Meta reports hackers accessed GitHub repositories using stolen employee credentials, exposing code and some personal",{"slug":105,"title":106,"published_at":107,"brief":108},"litellm-flaws-let-low-privileged-users-hijack-ai-gateway-and-steal-provider-keys-a7f356","LiteLLM flaws let low-privileged users hijack AI gateway and steal provider keys","2026-10-13T14:53:38+00:00","LiteLLM gateway flaws allow low-privilege users to hijack AI access and steal API keys.",[110,114,118,122,126,130],{"slug":111,"title":112,"published_at":113},"connectwise-cloud-backup-suspended-after-microsoft-365-tenant-compromise","ConnectWise Cloud Backup Suspended After Microsoft 365 Tenant Compromise","2026-10-18T10:20:20.475+00:00",{"slug":115,"title":116,"published_at":117},"connectwise-supply-chain-attack-compromises-162-microsoft-365-tenants","ConnectWise Supply-Chain Attack Compromises 162 Microsoft 365 Tenants","2026-10-17T16:20:21.545+00:00",{"slug":119,"title":120,"published_at":121},"peerstitch-malware-exploits-unpatched-fortios-to-evade-detection-via-legitimate-processes","PEERSTITCH Malware Exploits Unpatched FortiOS to Evade Detection via Legitimate Processes","2026-10-16T08:21:33.492+00:00",{"slug":123,"title":124,"published_at":125},"ai-agents-accessed-live-sensitive-data-during-testing-due-to-exposed-credentials-and-excessive-permi","AI Agents Accessed Live Sensitive Data During Testing Due to Exposed Credentials and Excessive Permissions","2026-10-16T08:20:59.754+00:00",{"slug":127,"title":128,"published_at":129},"critical-litellm-flaws-allow-admin-takeover-and-api-key-theft","Critical LiteLLM Flaws Allow Admin Takeover and API Key Theft","2026-10-14T12:21:48.189+00:00",{"slug":131,"title":132,"published_at":133},"privilege-escalation-flaw-in-ignition-scada-software-demands-immediate-patching","Privilege Escalation Flaw in Ignition SCADA Software Demands Immediate Patching","2026-10-14T00:21:48.311+00:00",[135,139,143,147,151],{"slug":136,"name":137,"problem":138},"phishing-resistant-mfa","Phishing-resistant MFA","A stolen password, or a user who taps Approve on a push prompt, is no longer enough to log in.",{"slug":140,"name":141,"problem":142},"identity-threat-detection","Identity threat detection and response (ITDR)","Attackers who log in with real, stolen credentials get noticed.",{"slug":144,"name":145,"problem":146},"identity-governance","Identity governance and single sign-on","People who leave or change roles lose access everywhere at once, and forgotten accounts stop piling up.",{"slug":148,"name":149,"problem":150},"zero-trust-access","Zero trust network access (ZTNA)","Remote access no longer means exposing VPN appliances to the internet.",{"slug":152,"name":153,"problem":154},"secrets-management","Secrets management","API keys, tokens and passwords stop leaking from code, chat and configuration files.",{"beyondtrust\u002Fpassword-safe":156,"palo-alto-networks\u002Fidira-privileged-access-management":171,"delinea\u002Fsecret-server":187,"wallix\u002Fwallix-pam":196,"threatlocker\u002Fprivileged-access-management":206},{"hq_country":157,"also_provides":158,"reviews":159,"affected":169,"reported":170},"US",[],[160,163,166],{"label":161,"url":162},"TechRadar: A review of BeyondTrust's Privileged Access Management Solutions (2024)","https:\u002F\u002Fwww.techradar.com\u002Fpro\u002Fsoftware-services\u002Fbeyondtrust-review",{"label":164,"url":165},"PeerSpot: BeyondTrust Password Safe user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fbeyondtrust-password-safe-reviews",{"label":167,"url":168},"Gartner Peer Insights: BeyondTrust Password Safe user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fbeyondtrust-password-safe",9,0,{"hq_country":157,"also_provides":172,"reviews":173,"affected":169,"reported":186},[],[174,177,180,183],{"label":175,"url":176},"AV-Comparatives EPR test 2026: Palo Alto Networks","https:\u002F\u002Fwww.av-comparatives.org\u002Fwp-content\u002Fuploads\u002F2026\u002F09\u002FEPR_PaloAlto_2026.pdf",{"label":178,"url":179},"CyberRatings 2025 Q4 Enterprise Firewall Report: Palo Alto Networks follow-on","https:\u002F\u002Fcyberratings.org\u002Fresources\u002F2025-q4-enterprise-firewall-report-palo-alto-networks-follow-on\u002F",{"label":181,"url":182},"PeerSpot: Palo Alto Networks NG Firewalls user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fpalo-alto-networks-ng-firewalls-reviews",{"label":184,"url":185},"Gartner Peer Insights: PA-Series user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fpa-series",32,{"hq_country":157,"also_provides":188,"reviews":189,"affected":170,"reported":170},[],[190,193],{"label":191,"url":192},"Gartner Peer Insights: Secret Server user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fsecret-server",{"label":194,"url":195},"PeerSpot: Delinea Secret Server user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fdelinea-secret-server-reviews",{"hq_country":197,"also_provides":198,"reviews":199,"affected":170,"reported":170},"FR",[],[200,203],{"label":201,"url":202},"PeerSpot: WALLIX Bastion user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fwallix-bastion-reviews",{"label":204,"url":205},"Gartner Peer Insights: WALLIX PAM user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fwallix-pam",{"hq_country":157,"also_provides":207,"reviews":208,"affected":170,"reported":170},[],[209,212,215],{"label":210,"url":211},"TechRadar: ThreatLocker review (2023)","https:\u002F\u002Fwww.techradar.com\u002Fpro\u002Fthreatlocker-review",{"label":213,"url":214},"PeerSpot: ThreatLocker Zero Trust Platform user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fthreatlocker-zero-trust-platform-reviews",{"label":216,"url":217},"Gartner Peer Insights: ThreatLocker Platform user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fthreatlocker-platform"]