> Research

Microsoft is dismantling NTLM through a three-phase deprecation plan while Kerberos faces its own expanding attack surface. A comprehensive look at the threat landscape, vendor responses, and the modern alternatives enterprises must adopt.

Most organizations cannot pass a rigorous audit of their non-human identity controls today. PCI DSS 4.0.1, DORA, and NYDFS now explicitly require service account access reviews, yet the average enterprise still has 60% of its AWS IAM access keys older than one year.