Cybersecurity in the Age of Non-Human Identities: The Asset Blind Spot Nobody’s Fixing
Between August 8 and August 18, 2025, threat actor UNC6395 used stolen OAuth tokens issued to the Salesloft Drift chatbot …
IT Discovery for PCI DSS: Identifying Assets Around the Cardholder Data Environment
A bank may know exactly which payment database holds cardholder data. That knowledge does not define the complete PCI DSS …
Service Mapping for Government: Mapping Citizen-Service Risk
On February 23, 2026, Michigan claimants and employers logging into two different state systems, one for unemployment benefits and one …
ITOM in Insurance: Why Claims and Underwriting Systems Fail Quietly
In June 2025, Erie Indemnity disclosed an information security event that disrupted network systems used for quoting, servicing, billing, claims, …
CMDB for Government: Centralizing Records Across Fragmented Agencies
The Department of Health and Human Services did not need 99 separate systems to prepare for and respond to a …
IT Discovery for Manufacturing: Closing the OT Boundary Gap
When Nucor detected unauthorized access to its IT systems in May 2025, the largest steel producer in North America did …
ITAM for SaaS Companies: Tracking Software Licensing Across a Changing Stack
An engineering team adopts a new monitoring tool. Another team already holds licenses for a product that does the same …
IT Discovery in Pharma: Identifying Enterprise IT Assets for Regulatory Audit Scope
A pharmaceutical company can run thousands of enterprise IT assets across plants, labs, clinics, and corporate environments. Only some of …
Banking and Financial Services: Managing Software Licensing Across Trading and Risk Platforms
On a Monday morning, the IT asset management lead at an international investment bank receives an unannounced compliance audit notice …
