Dan Kaplan, Content Marketer at Aembit

Breach Analysis

When Salesforce Becomes a De Facto Credential Repository: Lessons from the Drift OAuth Breach

This malicious campaign demonstrates how long-lived token theft can become the first step in a much broader breach.

Dan Kaplan

Aug 2025

3 min read

Best Practices

Dynamic Authorization vs. Static Secrets: Rethinking Cloud Access Controls

Learn why static secrets fail in modern environments and how to implement dynamic authorization.

Dan Kaplan

Aug 2025

6 min read

Breach Analysis

Vault Fault: Secrets Managers and the Limits of Centralized Trust

Recent flaws in Conjur and Vault highlight the risks of concentrating trust in a single repository – and why workload IAM may offer a more resilient path forward.

Dan Kaplan

Aug 2025

3 min read

Breach Analysis

When Identifiers Aren’t Identities: Security Lessons from the Base44 AI Vibe Coding Flaw

The vulnerability shows how modern application development is accelerating without bringing access controls along for the ride.

Dan Kaplan

Aug 2025

3 min read

Best Practices

Workload IAM vs. API Security

You can monitor traffic all day, but if you don’t control what’s allowed to send it, you’re already behind.

Dan Kaplan

Jul 2025

5 min read

Best Practices

The Story Behind Snowflake’s Push to Rein in Non-Human Identities

After locking down workforce identity, Snowflake’s security team took on the harder problem – controlling non-human access at scale without slowing teams down.

Dan Kaplan

Jul 2025

4 min read