[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"control:privileged-access-management":3},{"control":4,"products":25,"stories":65,"lessons":109,"related":134,"compare":155},{"slug":5,"name":6,"problem":7,"summary":8,"business_value":9,"vendor_questions":10,"risk_register":15,"framework_refs":16,"area":21,"updated_at":24},"privileged-access-management","Privileged access management (PAM)","Admin accounts stop being one stolen password away from control of everything.","Vaulting, rotation and just-in-time issue of administrator, service and root credentials, with privileged sessions recorded. Admins get elevated rights only when they need them, for as long as they need them.","Ransomware groups and state actors aim for domain admin, cloud root and backup console accounts, because those turn one foothold into a company-wide outage. PAM shrinks the number of standing admin accounts and makes their use visible, which also answers the auditor's question of who could do what.",[11,12,13,14],"Can it remove standing admin rights with just-in-time elevation, rather than only storing passwords?","Does it cover cloud consoles, service accounts and backup systems, not just servers?","Are privileged sessions recorded and searchable?","What happens if the PAM system itself is down or compromised?","Risk: an attacker gains domain or cloud admin rights and disables defences or backups. Control: PAM with just-in-time elevation and credential rotation. Owner: infrastructure lead. Measure: number of standing privileged accounts.",[17,18,19,20],"NIS2 Art. 21(2)(i): access control policies","DORA Art. 9: access limited to what is required","CIS Controls 5 and 6: account and access control management","ISO\u002FIEC 27001:2022 A.8.2: privileged access rights",{"name":22,"slug":23},"Access Control","access-control","2026-10-16T12:47:55.913203+00:00",[26,34,42,50,57],{"vendor_slug":27,"vendor_name":28,"vendor_logo":29,"product_slug":30,"product_name":31,"url":32,"description":33},"beyondtrust","BeyondTrust","\u002Fvendor-logos\u002Fbeyondtrust.png","password-safe","BeyondTrust Password Safe","https:\u002F\u002Fwww.beyondtrust.com\u002Fproducts\u002Fpassword-safe","Privileged password and session management.",{"vendor_slug":35,"vendor_name":36,"vendor_logo":37,"product_slug":38,"product_name":39,"url":40,"description":41},"delinea","Delinea","\u002Fvendor-logos\u002Fdelinea.png","secret-server","Delinea Secret Server","https:\u002F\u002Fdelinea.com\u002Fproducts\u002Fsecret-server","Vault for privileged credentials with discovery, rotation and session recording.",{"vendor_slug":43,"vendor_name":44,"vendor_logo":45,"product_slug":46,"product_name":47,"url":48,"description":49},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","idira-privileged-access-management","Idira Privileged Access Management","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fidira\u002Fhuman\u002Fprivileged-access-management","Privileged access management from the former CyberArk portfolio: vaulting, rotation, just-in-time access and session monitoring.",{"vendor_slug":51,"vendor_name":52,"vendor_logo":53,"product_slug":5,"product_name":54,"url":55,"description":56},"threatlocker","ThreatLocker","\u002Fvendor-logos\u002Fthreatlocker.png","Privileged Access Management","https:\u002F\u002Fwww.threatlocker.com\u002Fcapabilities\u002Fprivileged-access-management","Gives elevated rights to specific applications only where needed, so users do not need local admin accounts.",{"vendor_slug":58,"vendor_name":59,"vendor_logo":60,"product_slug":61,"product_name":62,"url":63,"description":64},"wallix","WALLIX","\u002Fvendor-logos\u002Fwallix.png","wallix-pam","WALLIX PAM","https:\u002F\u002Fwww.wallix.com\u002Fproducts\u002Fprivileged-access-management-software\u002F","Privileged access management with session recording, for IT and OT environments.",{"total":66,"last_days":67,"recent":68},798,324,[69,74,79,84,89,94,99,104],{"slug":70,"title":71,"published_at":72,"brief":73},"postgresql-patches-52-flaws-including-22-year-old-bug-enabling-authenticated-rce-d8cc21","PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE","2026-11-13T16:53:08+00:00","PostgreSQL patches 52 flaws, including a 22-year-old bug enabling authenticated RCE.",{"slug":75,"title":76,"published_at":77,"brief":78},"apify-confirms-customer-data-accessed-in-cyberattack-854397","Apify Confirms Customer Data Accessed in Cyberattack","2026-11-13T12:41:01+00:00","Apify confirms customer data accessed in cyberattack via compromised credentials.",{"slug":80,"title":81,"published_at":82,"brief":83},"check-point-warns-of-zero-day-flaw-exploited-for-root-access-02c1dc","Check Point warns of zero-day flaw exploited for root access","2026-11-13T10:44:22+00:00","Check Point warns of zero-day flaw exploited for root access.",{"slug":85,"title":86,"published_at":87,"brief":88},"ransomware-at-the-hypervisor-layer-how-attackers-use-esxi-and-vcenter-features-f-365656","Ransomware at the hypervisor layer: how attackers use ESXi and vCenter features for malicious purposes","2026-11-13T09:00:43+00:00","BlackNevas ransomware group targets VMware ESXi and vCenter, destroying VMs and backups.",{"slug":90,"title":91,"published_at":92,"brief":93},"nightmare-eclipse-drops-windows-zero-day-exploit-signdrop-d89589","Nightmare Eclipse Drops Windows Zero-Day Exploit ‘SignDrop’","2026-11-13T08:50:36+00:00","Nightmare Eclipse drops Windows zero-day exploit 'SignDrop' abusing CLFS and Windows Defender.",{"slug":95,"title":96,"published_at":97,"brief":98},"hackers-exploit-check-point-firewall-flaws-to-gain-root-access-and-deploy-wiper-e51b13","Hackers Exploit Check Point Firewall Flaws to Gain Root Access and Deploy Wiper Malware on VMware ESXi","2026-11-13T06:38:59+00:00","Hackers exploit Check Point firewall flaws, deploy wiper malware on VMware ESXi.",{"slug":100,"title":101,"published_at":102,"brief":103},"fbi-says-us-seized-1-2-billion-worth-of-cryptocurrency-stolen-from-binance-e4ac87","FBI Says US Seized $1.2 Billion Worth of Cryptocurrency Stolen From Binance","2026-11-13T02:28:21+00:00","US Seizes $1.2B in Crypto Stolen from Binance; North Korea Blamed for Separate $400M Theft",{"slug":105,"title":106,"published_at":107,"brief":108},"self-hosted-claude-managed-agents-keeps-agent-credentials-in-your-environment-a53dac","Self-hosted Claude Managed Agents keeps agent credentials in your environment","2026-11-12T18:07:00+00:00","Anthropic releases self-hosted Claude Managed Agents for private beta.",[110,114,118,122,126,130],{"slug":111,"title":112,"published_at":113},"stolen-credential-exposes-apify-customer-data-highlighting-mfa-and-secrets-management-gaps","Stolen Credential Exposes Apify Customer Data, Highlighting MFA and Secrets Management Gaps","2026-11-13T13:20:22.45+00:00",{"slug":115,"title":116,"published_at":117},"ransomware-groups-weaponize-legitimate-vmware-tools-to-destroy-backups-before-encrypting","Ransomware Groups Weaponize Legitimate VMware Tools to Destroy Backups Before Encrypting","2026-11-13T11:22:12.372+00:00",{"slug":119,"title":120,"published_at":121},"check-point-zero-day-exploited-for-root-access-via-ipc-interface-flaw","Check Point Zero-Day Exploited for Root Access via IPC Interface Flaw","2026-11-13T11:20:59.093+00:00",{"slug":123,"title":124,"published_at":125},"windows-zero-day-signdrop-highlights-privilege-escalation-risk-on-unpatched-systems","Windows Zero-Day SignDrop Highlights Privilege Escalation Risk on Unpatched Systems","2026-11-13T09:20:23.484+00:00",{"slug":127,"title":128,"published_at":129},"chained-firewall-flaws-enable-root-access-and-wiper-deployment-on-esxi-hosts","Chained Firewall Flaws Enable Root Access and Wiper Deployment on ESXi Hosts","2026-11-13T08:21:56.51+00:00",{"slug":131,"title":132,"published_at":133},"north-korean-social-engineering-nets-billions-from-crypto-exchange","North Korean Social Engineering Nets Billions From Crypto Exchange","2026-11-13T03:20:21.598+00:00",[135,139,143,147,151],{"slug":136,"name":137,"problem":138},"phishing-resistant-mfa","Phishing-resistant MFA","A stolen password, or a user who taps Approve on a push prompt, is no longer enough to log in.",{"slug":140,"name":141,"problem":142},"identity-threat-detection","Identity threat detection and response (ITDR)","Attackers who log in with real, stolen credentials get noticed.",{"slug":144,"name":145,"problem":146},"identity-governance","Identity governance and single sign-on","People who leave or change roles lose access everywhere at once, and forgotten accounts stop piling up.",{"slug":148,"name":149,"problem":150},"zero-trust-access","Zero trust network access (ZTNA)","Remote access no longer means exposing VPN appliances to the internet.",{"slug":152,"name":153,"problem":154},"secrets-management","Secrets management","API keys, tokens and passwords stop leaking from code, chat and configuration files.",{"beyondtrust\u002Fpassword-safe":156,"palo-alto-networks\u002Fidira-privileged-access-management":171,"delinea\u002Fsecret-server":188,"wallix\u002Fwallix-pam":197,"threatlocker\u002Fprivileged-access-management":207},{"hq_country":157,"also_provides":158,"reviews":159,"affected":169,"reported":170},"US",[],[160,163,166],{"label":161,"url":162},"TechRadar: A review of BeyondTrust's Privileged Access Management Solutions (2024)","https:\u002F\u002Fwww.techradar.com\u002Fpro\u002Fsoftware-services\u002Fbeyondtrust-review",{"label":164,"url":165},"PeerSpot: BeyondTrust Password Safe user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fbeyondtrust-password-safe-reviews",{"label":167,"url":168},"Gartner Peer Insights: BeyondTrust Password Safe user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fbeyondtrust-password-safe",12,0,{"hq_country":157,"also_provides":172,"reviews":173,"affected":186,"reported":187},[],[174,177,180,183],{"label":175,"url":176},"AV-Comparatives EPR test 2026: Palo Alto Networks","https:\u002F\u002Fwww.av-comparatives.org\u002Fwp-content\u002Fuploads\u002F2026\u002F09\u002FEPR_PaloAlto_2026.pdf",{"label":178,"url":179},"CyberRatings 2025 Q4 Enterprise Firewall Report: Palo Alto Networks follow-on","https:\u002F\u002Fcyberratings.org\u002Fresources\u002F2025-q4-enterprise-firewall-report-palo-alto-networks-follow-on\u002F",{"label":181,"url":182},"PeerSpot: Palo Alto Networks NG Firewalls user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fpalo-alto-networks-ng-firewalls-reviews",{"label":184,"url":185},"Gartner Peer Insights: PA-Series user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fpa-series",22,43,{"hq_country":157,"also_provides":189,"reviews":190,"affected":170,"reported":170},[],[191,194],{"label":192,"url":193},"Gartner Peer Insights: Secret Server user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fsecret-server",{"label":195,"url":196},"PeerSpot: Delinea Secret Server user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fdelinea-secret-server-reviews",{"hq_country":198,"also_provides":199,"reviews":200,"affected":170,"reported":170},"FR",[],[201,204],{"label":202,"url":203},"PeerSpot: WALLIX Bastion user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fwallix-bastion-reviews",{"label":205,"url":206},"Gartner Peer Insights: WALLIX PAM user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fwallix-pam",{"hq_country":157,"also_provides":208,"reviews":209,"affected":170,"reported":170},[],[210,213,216],{"label":211,"url":212},"TechRadar: ThreatLocker review (2023)","https:\u002F\u002Fwww.techradar.com\u002Fpro\u002Fthreatlocker-review",{"label":214,"url":215},"PeerSpot: ThreatLocker Zero Trust Platform user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fthreatlocker-zero-trust-platform-reviews",{"label":217,"url":218},"Gartner Peer Insights: ThreatLocker Platform user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fthreatlocker-platform"]