[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"framework:nist-sp\u002F800-207":3},{"item":4,"lessons":16,"controls":66,"related":97},{"family":5,"item":6,"code":7,"title":8,"citations":9,"publisher":10,"summary_md":11,"official_text":12,"official_attribution":12,"official_url":13,"link_label":14,"note":12,"updated_at":15},"nist-sp","800-207","SP 800-207","SP 800-207: Zero Trust Architecture",81,"US National Institute of Standards and Technology (NIST)","**What it covers.** NIST publication that defines zero trust concepts and describes logical components and deployment models for a zero trust architecture. It moves protection from network perimeters to individual resources, with access decisions made per request based on identity, device state and other context.\n\n**In practice.** Applying it well usually means a gradual migration: identifying critical resources and data flows, strengthening identity and device posture, and introducing policy decision and enforcement points in front of resources. Access is granted with least privilege and continuously re-evaluated, with comprehensive logging of decisions. Managers should expect a roadmap, inventories of resources and flows, and measurable progress on removing implicit trust.\n\n**Common gaps.** Common gaps are treating zero trust as a product purchase, keeping broad network-level trust for legacy systems, and weak device inventory that undermines policy decisions.",null,"https:\u002F\u002Fcsrc.nist.gov\u002Fpubs\u002Fsp\u002F800\u002F207\u002Ffinal","Read the publication at NIST","2026-10-18T15:18:43.663+00:00",{"total":9,"list":17},[18,22,26,30,34,38,42,46,50,54,58,62],{"slug":19,"title":20,"published_at":21},"zero-trust-is-more-than-a-buzzword-identity-first-always","Zero Trust Is More Than a Buzzword — Identity First, Always","2026-10-14T18:22:29.051+00:00",{"slug":23,"title":24,"published_at":25},"north-korean-remote-work-fraud-identity-theft-funds-weapons-programs","North Korean Remote Work Fraud: Identity Theft Funds Weapons Programs","2026-10-13T22:20:17.411+00:00",{"slug":27,"title":28,"published_at":29},"ai-accelerated-attacks-outpace-traditional-defenses","AI-Accelerated Attacks Outpace Traditional Defenses","2026-10-13T12:21:32.737+00:00",{"slug":31,"title":32,"published_at":33},"ai-agents-can-silently-exceed-their-assigned-permissions","AI Agents Can Silently Exceed Their Assigned Permissions","2026-10-09T16:20:55.25+00:00",{"slug":35,"title":36,"published_at":37},"ai-agents-outpace-legacy-iam-the-non-human-identity-security-gap","AI Agents Outpace Legacy IAM: The Non-Human Identity Security Gap","2026-10-09T12:20:39.879+00:00",{"slug":39,"title":40,"published_at":41},"ai-agent-escape-triggers-wikimedia-outage-and-proxy-abuse","AI Agent Escape Triggers Wikimedia Outage and Proxy Abuse","2026-10-07T20:20:35.994+00:00",{"slug":43,"title":44,"published_at":45},"ai-agents-need-network-guardrails-before-they-act-on-your-behalf","AI Agents Need Network Guardrails Before They Act on Your Behalf","2026-10-03T12:20:41.116+00:00",{"slug":47,"title":48,"published_at":49},"zero-trust-remains-effective-against-ai-attacks-when-properly-implemented","Zero Trust Remains Effective Against AI Attacks — When Properly Implemented","2026-10-01T18:20:20.176+00:00",{"slug":51,"title":52,"published_at":53},"zero-trust-has-a-day-one-blind-spot-the-onboarding-identity-gap","Zero Trust Has a Day-One Blind Spot: The Onboarding Identity Gap","2026-10-01T16:22:29.214+00:00",{"slug":55,"title":56,"published_at":57},"shinyhunters-defy-fbi-after-fbijobsgov-breach-reframe-attack-as-marketing","ShinyHunters Defy FBI After FBIJobs.gov Breach, Reframe Attack as 'Marketing'","2026-09-30T12:22:21.479+00:00",{"slug":59,"title":60,"published_at":61},"compromised-identity-opens-door-to-cloud-devops-pipeline-takeover","Compromised Identity Opens Door to Cloud DevOps Pipeline Takeover","2026-09-29T18:21:58.594+00:00",{"slug":63,"title":64,"published_at":65},"spectre-v2-btr-variant-bypasses-linux-defenses-to-leak-sensitive-memory","Spectre-v2 BTR Variant Bypasses Linux Defenses to Leak Sensitive Memory","2026-09-29T18:21:22.375+00:00",[67,72,77,82,87,92],{"slug":68,"name":69,"problem":70,"stories":71},"identity-threat-detection","Identity threat detection and response (ITDR)","Attackers who log in with real, stolen credentials get noticed.",27,{"slug":73,"name":74,"problem":75,"stories":76},"phishing-resistant-mfa","Phishing-resistant MFA","A stolen password, or a user who taps Approve on a push prompt, is no longer enough to log in.",23,{"slug":78,"name":79,"problem":80,"stories":81},"identity-governance","Identity governance and single sign-on","People who leave or change roles lose access everywhere at once, and forgotten accounts stop piling up.",19,{"slug":83,"name":84,"problem":85,"stories":86},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",17,{"slug":88,"name":89,"problem":90,"stories":91},"ai-security","AI application security","Prompt injection, data leaks through AI tools and unapproved AI use get caught.",16,{"slug":93,"name":94,"problem":95,"stories":96},"network-segmentation","Network segmentation and microsegmentation","One compromised machine can no longer reach everything else.",9,[98,104,110,115,121,125,130,134],{"family":99,"item":100,"code":101,"title":102,"together":103},"cis","6","Control 6","Access Control Management",48,{"family":105,"item":106,"code":107,"title":108,"together":109},"nist-800-53","ac-2","AC-2","Account Management",42,{"family":99,"item":111,"code":112,"title":113,"together":114},"13","Control 13","Network Monitoring and Defense",35,{"family":116,"item":117,"code":118,"title":119,"together":120},"gdpr","32","Article 32","Security of processing",34,{"family":99,"item":122,"code":123,"title":108,"together":124},"5","Control 5",32,{"family":99,"item":126,"code":127,"title":128,"together":129},"12","Control 12","Network Infrastructure Management",25,{"family":131,"item":132,"code":133,"title":133,"together":76},"itil","overview","ITIL",{"family":105,"item":135,"code":136,"title":137,"together":76},"ac-6","AC-6","Least Privilege"]