Hoplite Labs
Latest · Identity and directory
Learn how small configuration changes can create hidden security risks over time—and why mature teams continually validate access, trust, and dependencies.
Jul 9, 2026
Read the articleThe Hoplite Intelligence Feed ranks public security stories as they break. This is its current Top 100: tile size is feed score and color is severity. These are public stories, not findings from customer environments.
Jun 18, 2026
Identity and directory
Explore common Active Directory weaknesses, how attackers chain them into paths to privileged access, and how security teams should prioritize remediation.
Jun 11, 2026
Emerging threats
Learn how AI-assisted phishing makes social engineering more convincing—and which training, identity controls, and validation practices reduce risk.
Jun 4, 2026
Cloud and SaaS
Learn how SaaS sprawl, stale OAuth tokens, and forgotten integrations create hidden security risks—and how mid-market teams can reduce their exposure.
May 19, 2026
Testing practice
Visibility gaps slow incident response and increase risk. Learn why attackers thrive in unclear environments.
May 1, 2026
Testing practice
Cyber insurance renewals now assess real-world exposure, attacker movement, and detection gaps.
Apr 13, 2026
Emerging threats
How AI features in trusted tools change vendor risk, data access, and security. What legal, procurement, and risk teams must evaluate now.
Mar 23, 2026
Testing practice
Mid-market firms aren’t ignored; they’re easier targets. Logging gaps, identity drift, and cloud sprawl quietly create outsized breach risk.
Mar 13, 2026
Cloud and SaaS
Cloud misconfigurations rarely cause breaches alone. See how identity, permissions, and configuration drift turn routine cloud decisions into serious risk.
Mar 6, 2026
Testing practice
Year-end penetration tests often miss the mark. Learn why Q4 testing limits remediation, delays fixes, and reduces the real security value of a pen test.
Feb 27, 2026
Emerging threats
Michael Weimer shares his thoughts around the recent Claude Code Security hype.
Feb 24, 2026
Identity and directory
MFA reduces credential attacks, but identity sprawl and service accounts now create larger breach paths. Learn how to validate real identity risk.
Feb 17, 2026
Testing practice
Learn why passing a cybersecurity audit doesn’t ensure security, and how ongoing testing and validation reveal real risk beyond compliance.
Jan 8, 2026
Emerging threats
Get calm, expert insight on React/Next.js vulnerabilities from Hoplite Labs’ cybersecurity blog to assess real risk and avoid overreacting to hype.
New Hoplite Labs articles, sent to your inbox.
Tell us what you read that made you wonder. We will suggest a scope to find out.
