Are Your Password Policies Enforced In Practice?
IT teams: are your password policies enforced in practice… or just on paper?
Security | Threat Detection | Cyberattacks | DevSecOps | Compliance
The Latest Cybersecurity News & Insights From Around The World
Reusing Passwords Puts Your Accounts At Risk
Reusing passwords puts every account at risk. A single compromised credential can give attackers access to multiple accounts. Keeper Security generates and stores strong, unique passwords for every account, so IT admins don’t have to worry about reused or weak credentials.
The 1Password Environments MCP Server is now on Cursor Marketplace
AI agents are doing more than just generating code. Increasingly, they are working autonomously on complex coding challenges, touching production APIs, databases, and infrastructure across development environments, often without thorough human review. To perform these operations and access multiple systems, agents rely on developer secrets and non-human identities (NHI). But often, developers lack a secure way to share these secrets, leading to overprivileged, invisible access.
Scaling security reviews at 1Password: Solving the context and nondeterminism problems
In our last post, we shared how we began to scale our security code review process with SAGE. We discussed how we gathered historical Product Security (ProdSec) review records to create a 1Password-specific ruleset, the three-stage Finder/Critic/Judge pipeline, and the limitations of our v1 implementation.
1Password Credential Broker is now in public preview
Every security team has tried to trace a credential access event back to a specific workload, and received nothing but a "service account." That service account probably had access to an entire vault, and its audit trail doesn’t tell you which repo triggered the request, which specific credential was accessed, or whether the workflow still has access. When an auditor asks, or an incident occurs, that's not a good place to be.
1Password's research finds AI agent adoption is outpacing governance
1Password surveyed 500 American IT and security professionals and 500 developers to learn how organizations are adopting and governing AI for their most technical workers.
Secrets Off Disk: How 1Password Secures Developer Workflows
Your.env file has your database password, your AWS keys, and your Stripe secret, all in plaintext, sitting on your laptop. 1Password Developer Watchtower finds it, 1Password Environments secures it, and you keep shipping. See how 1Password discovers plaintext developer credentials, imports them into an encrypted environment, and mounts a virtual protected.env, with no workflow disruption for developers and full fleet visibility for security teams.
Distributed systems in disguise with Maxim Fateev from Temporal | Zero-Shot Learning
When most developers write code, crash recovery logic is at the bottom of their priorities, until crashes and delays force them to incorporate resiliency logic. That’s why Temporal co-founder and CTO Maxim Fateev built a system to turn code into durable execution. In his conversation with 1Password CTO Nancy Wang and VP of Engineering for Developer and AI Jeff Malnick, Maxim explains why the distributed systems thinking that shaped his work is now essential for building reliable AI agents, with a live demo of a durable agent surviving a crash.
Manage Your Secrets With Keeper Security's Universal Secrets Sync
Developers, how are you managing your secrets? Keeper Security’s Universal Secrets Sync automatically distributes credentials and secrets stored in Keeper to external secrets managers and cloud platforms, including AWS Secrets Manager, Azure Key Vault and Google Cloud Secret Manager.
Cybersecurity Checklist for MSSPs
Managed Security Service Providers (MSSPs) operate across a broad, complex attack surface, simultaneously managing privileged access to multiple client environments while maintaining the security of their own infrastructure. This dual responsibility makes MSSPs valuable targets for attackers who understand that compromising just one MSSP can grant them entry into every client network the provider manages.