#PrivilegeManagement

Marco Ciappelli🎙️✨:verified: :donor:Marcociappelli@infosec.exchange
2025-08-15

🎯 FINAL POST FROM THE FLOOR: #BlackHatUSA 2025 Coverage!

Access Roulette: How to Stop Betting Your Security on Standing Privileges

This wraps up our on-location content from Las Vegas!

Next week we'll reconnect with our main event sponsors— BLACKCLOAK, Dropzone AI, Stellar Cyber, and Akamai Technologies—to bring you their post-event insights and feedback. Of course ThreatLocker's recap was already captured on the floor and published earlier today. Plus, watch for our closing reflection articles from me Marco Ciappelli and Sean Martin, CISSP!

Our final floor conversation comes thanks to our friends at Apono 🙏

Modern enterprises are gambling with security every day. Static permissions, manual approvals, and periodic audits create "privilege creep" that turns every over-privileged account into a potential breach waiting to happen.

At #BlackHat USA 2025, Ofir Stein from #Apono reveals how to break this dangerous cycle.

The stakes keep rising:
• Non-human identities (service accounts, #APIs, #AIagents) retain high-level privileges long after tasks complete
• Organizations discover risks during audits but lack scalable remediation
• #Business teams need rapid access while security teams battle expanding #attacksurfaces

Apono's Zero Standing Privilege model:
• Removes ALL permanent access by default
• Grants access dynamically based on business context
• Automatically revokes permissions when tasks complete
• Works for both human AND non-human identities
• Integrates with existing #identity providers—no rip and replace

Key capabilities:
• Context-based policy management aligned with business objectives
• Continuous discovery of identities, privileges
• Automated remediation of unnecessary privileges
• Real-time anomaly detection feeding #SOC workflows
• Scalable across centralized and decentralized environments

The result?
Engineers gain control over their access (building trust), security teams maintain tight governance, and organizations can finally stop betting their security on standing privileges.

📺 Watch the video: youtu.be/ciBsH84PVQU

🎧 Listen to the podcast: brand-stories-podcast.simpleca

đź“– Read the blog: itspmagazine.com/their-stories

➤ Learn more about Apono: itspm.ag/apono-1034

✦ Catch more stories from Apono: itspmagazine.com/directory/apo

🎪 Follow all of our #BHUSA 2025 coverage: itspmagazine.com/bhusa25

#Cybersecurity #IdentityManagement #ZeroTrust #AccessControl #BlackHatUSA #BHUSA25 #PrivilegeManagement #IAM #SecurityAutomation #NonHumanIdentities

2025-02-24

Understanding Db2 Roles: Simplifying Privilege Management
Learn how to troubleshoot Db2 Roles and Privileges! This guide covers common issues, best practices, and practical examples for streamlining privilege management and enhancing database security.
tech-champion.com/application-
Learn how Db2 roles simplify privilege management offering advan...

2025-02-20

Understanding Db2 Roles: Simplifying Privilege Management
Learn how to troubleshoot Db2 Roles and Privileges! This guide covers common issues, best practices, and practical examples for streamlining privilege management and enhancing database security.
tech-champion.com/application-
Learn how Db2 roles simplify privilege management offering advan...

2025-02-20

Understanding Db2 Roles: Simplifying Privilege Management
Learn how to troubleshoot Db2 Roles and Privileges! This guide covers common issues, best practices, and practical examples for streamlining privilege management and enhancing database security.
tech-champion.com/application-
Learn how Db2 roles simplify privilege management offering advan...

2025-02-20

Resolving DB2 SQL0551N Authorization Error in CREATE VIEW Statement
DB2 SQL0551N Authorization Error: Learn how to grant CREATEIN & SELECT privileges to avoid this common database issue. Efficiently manage DB2 permissions & prevent future errors using roles.
tech-champion.com/database/db2

Client Info

Server: https://mastodon.social
Version: 2025.07
Repository: https://github.com/cyevgeniy/lmst