Identity and Access on Juan Carlos Munerahttps://cybersecpro.me/categories/identity-and-access/Recent content in Identity and Access on Juan Carlos MuneraHugo -- gohugo.ioen© 2026 Juan Carlos MuneraThu, 01 Oct 2026 00:00:00 +0000The Four Awareness Month Habits, Tested Against 2026 Tradecrafthttps://cybersecpro.me/posts/awareness-month-habits-2026-tradecraft/Thu, 01 Oct 2026 00:00:00 +0000https://cybersecpro.me/posts/awareness-month-habits-2026-tradecraft/The National Cybersecurity Alliance’s four habits for 2026 are sound advice. Checked against this year’s vishing, device code phishing, ClickFix, and fake update lures, each one shows where the attack has moved and which control has to hold when the user can’t see it coming.When the Control Isn't the Boundary: Unsigned Tokens and Leaky File Watchershttps://cybersecpro.me/posts/unsigned-side-channels/Wed, 30 Sep 2026 00:00:00 +0000https://cybersecpro.me/posts/unsigned-side-channels/Two late-September 2026 disclosures, an unsigned-token flaw in Microsoft’s internal Titan analytics service and cross-user leakage through OS file-notification APIs, show how easily the control you point to can differ from the control that actually enforces access.