“A legitimate API key became insider risk the moment it authenticated — because the attacker signed in with something you issued.”

— Professor Kai London, CISO.

Quote card by Professor Kai London reading 'A legitimate API key became insider risk the moment it authenticated — because the attacker signed in with something you issued.'. From the book The Breach Had Permission.
Quote card by Professor Kai London reading 'A legitimate API key became insider risk the moment it authenticated — because the attacker signed in with something you issued.'. From the book The Breach Had Permission.

A legitimate API key became insider risk the moment it authenticated — because the attacker signed in with something you issued. — Kai London (Professor Kai London), CISO. Principle 1275 of 10000 from the book “The Breach Had Permission” — cybersecurity, AI security and OT resilience doctrine. Official sites: professorkailondon.com · kailondon.co.uk

Related: Principle 3775 Principle 6275 Principle 8775

View in gallery (page 13) · About this book