Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Boris Kurktchiev is a Field CTO at Teleport, known for his expertise in Zero-Trust identity solutions for cloud and AI, and for his contributions to the CNCF's Cloud Native AI working group. Doyensec dropped a piece last week called The MCP AuthN/Z Nightmare, and I think anyone deploying MCP in production needs to read it.

Across the Webex link is the 3PAO team sent to pass judgment on your adherence with FedRAMP 20x. Like all auditors, they're diligent, professional, and particularly unnerving when they’re trying to be disarming. It’s the first interview where you explain what the product does.

Matthew Smith is a vCISO and management consultant specializing in cybersecurity risk management and AI. Over the last 15 years, he has authored standards, guidance and best practices with ISO, NIST, and other governing bodies. Smith strives to create actionable resources for organizations seeking to minimize technological risk and increase value to customers.

SOC 2, which stands for Systems and Organization Controls 2, is a framework developed by the American Institute of Certified Public Accountants (AICPA) to evaluate controls for security, availability, processing integrity, confidentiality, and privacy. As agentic AI systems begin acting autonomously, AI and SOC 2 compliance become closely linked. These systems drive new efficiencies, but also introduce new risks.

This guide walks through how to deploy microservices with Zero Trust using SPIFFE identities, service mesh mTLS, and short-lived certificates. You’ll learn how to deploy a secure microservices application, configure default-deny authorization policies, and rebuild service connectivity with explicit SPIFFE-based allow rules.