Compass Security Blog - Offensive Defense

With AI agents now running in many Microsoft 365 tenants, monitoring their activity has become part of the security team’s job. Microsoft Defender XDR…

Read more

Introduction Pwn2Own is a renowned hacking competition organized by the Zero Day Initiative (ZDI), where security researchers demonstrate previously…

Read more

While the full implementation of the Cyber Resilience Act (CRA) won’t take effect until December 2027, another critical milestone is already…

Read more

Some months ago, I performed a web application penetration test on an application that used passkey for authentication. As part of the assessment, I…

Read more

Pipeleek 1.0 is here. What started as a GitLab pipeline secret scanner now covers seven CI/CD platforms and comes with helpers for runner…

Read more