The library.
Decades of experience captured in blogs, research, media articles, and talks. Search it, filter it, find the piece you need.
All content
Every post, article, report, talk, and media mention.BlogOctober 2026
Hours of KYC, one HTTP 402: what we learned taking payments for agents
klminnovation.comAI Strategy
BlogOctober 2026
Your AI Agent's Memory Is the New Backdoor. AWS Says It's Not a Vulnerability.
klminnovation.comAI Cloud Strategy
BlogOctober 2026
Securing the SI Era: Human Plus Machine
klminnovation.comAI Strategy
BlogOctober 2026
Your AI Vendor Is Now Your Biggest Untrusted Third Party
klminnovation.comAI Strategy Threats
BlogSeptember 2026
On Teslas and Tensors
klminnovation.comAI Strategy
BlogSeptember 2026
The Model You Point At Is a Security Decision
klminnovation.comAI AppSec Strategy
BlogSeptember 2026
Who Owns the Fallout When Agents Breach?
klminnovation.comAI Strategy
ArticleSeptember 2026
KLM Innovation Security Monitor
klminnovation.comAI Threats Strategy Security
ArticleOctober 2026
Playbook+ for Agent/MCP Security
klminnovation.comAI API AppSec
BlogAugust 2026
Attacker-first static analysis for the AI agent era: introducing ClawHunter
klminnovation.comAI Threats AppSec
BlogJuly 2026
What Is Web App and API Protection (WAAP)?
HarnessAPI AppSec
BlogJuly 2026
Secure by default for vibe coding: introducing grok-asvs
klminnovation.comAI Compliance
SpeakingMay 2026
State of AI Security: How Mythos is Changing Application Vulnerability Discovery & Runtime Defense
BankInfoSecurityAI Cloud Vulns
BlogMay 2026
The Harness API Testing Methodology
HarnessAPI
SpeakingMay 2026
Securing AI Across the Entire Software Development Lifecycle: A Harness + Wiz Perspective
HarnessAI
SpeakingMay 2026
The New AppSec Playbook: Securing AI-Native Applications
HarnessAI AppSec Strategy
BlogMay 2026
API Security Testing Just Got Easier & Smarter
HarnessAPI Security
BlogApril 2026
Eliminate Manual Authentication Configuration for Fast & Effective API Security Scanning
HarnessAPI Identity Security
SpeakingApril 2026
Securing AI-Native Systems: Why AI Security Is Still an API Security Problem
HarnessAI API Security
BlogApril 2026
Unlocking Security Potential for AI: Introducing the Harness WAAP MCP Server
HarnessAI API Security
BlogApril 2026
Authentication vs Authorization: What’s the Difference and Why It Matters
HarnessIdentity
SpeakingApril 2026
Risks in AI-Native Systems: Why AI Security Is Still an API Security Problem
BankInfoSecurityAI API Security
ResearchApril 2026
The API Visibility Trap: When Excessive Signal Complicates Protection
HarnessAPI
BlogMarch 2026
The McKinsey Incident Is a Warning Shot for AI-Native Design
HarnessAI Threats
BlogMarch 2026
Introducing Radar in Harness Bot & Abuse Protection
HarnessStrategy
SpeakingMarch 2026
AI Generated Code Is Expanding the Attack Surface
BankInfoSecurityAI Threats
SpeakingMarch 2026
Evolving Each Layer of Your Security Program
ActualTechStrategy Security
SpeakingFebruary 2026
The Hidden Danger in LLM-Powered Applications
BankInfoSecurityAI
SpeakingDecember 2025
Your Agent Has Gone Rogue: Dissecting Emerging Attacks Against DevSecOps AI Tools
BankInfoSecurityAI Threats AppSec
SpeakingOctober 2025
Is it the OWASP API Security Top 10, or just 5?
ActualTechAPI Security
ResearchOctober 2025
OWASP API Security Top 10… or should it be 4?
HarnessAPI Security
MediaJuly 2024
NHIs may be your biggest — and most neglected — security hole
CSOStrategy Security
MediaMay 2024
Third-party software supply chain threats continue to plague CISOs
CSOSupply chain
MediaMay 2024
How Generative AI can both harm and heal cybersecurity
Economy Middle EastAI Strategy
ResearchMay 2024
Practical Cloud Security Guidance in the Era of Cybersecurity Regulation
SysdigCloud Compliance Strategy
MediaMay 2024
US deploys commerce and communications against cyber threats, Blinken says
CSOCompliance
MediaApril 2024
New Penalties is a Push to Mitigate Cybersecurity Threats in Telecommunications and Healthcare
MarketScaleCompliance Strategy
MediaApril 2024
Cybersecurity Risks and Patient Risks are at a Crossroads as Tech Moves Rapidly
MarketScaleCompliance Strategy
ArticleApril 2024
Navigating Cybersecurity in Telecommunications: The FCC's 7-Day Rule and Beyond
Security MagazineCompliance Strategy
MediaMarch 2024
AI security tools promise to supercharge productivity, but experts worry cyber pros could become too reliant
ITProAI Security
MediaMarch 2024
Continued Threats Require a Major Shift in Healthcare Cybersecurity Risk Perception
MarketScaleCompliance Strategy
SpeakingMarch 2024
Continued Threats Require a Major Shift in Healthcare Cybersecurity Risk Perception
MarketScaleCompliance Strategy
SpeakingMarch 2024
Global CISO Town Hall: Prioritize Cyber Decision-Making to Evolve Your Cybersecurity Strategy
EvantaStrategy
SpeakingMarch 2024
Checkmarx + Tech Partner Showcase: Understanding the Code to Cloud Approach
CheckmarxCloud
SpeakingFebruary 2024
SOAR Into 2024: Power Your Cloud Detection and Response
SANSCloud
SpeakingFebruary 2024
Exploring Advanced Cybersecurity with Michael Isbitski
Last Week in AWSStrategy
ResearchFebruary 2024
Sysdig 2024 Cloud-Native Security and Usage Report
SysdigCloud Security
ArticleDecember 2023
Can vulnerability disclosure be timely, detailed and coordinated?
Network Security MagazineVulns
ArticleDecember 2023
Vulnerabilities Aren’t New, but the Speed of Incidents Is
Security ManagementVulns
MediaNovember 2023
Is DevOps dying as a discipline?
The StackStrategy
MediaNovember 2023
Will More Threat Actors Weaponize Cybersecurity Regulations?
InformationWeekThreats Compliance Strategy
SpeakingNovember 2023
OWASP Kubernetes Top 10 Projects: What Risks You Need to Prioritize in 2023
SysdigAPI Cloud
MediaNovember 2023
Cybersecurity industry responds to SEC charges against SolarWinds and former CISO
VentureBeatSupply chain Compliance Strategy
MediaOctober 2023
The Race To Contain Software Containers
ForbesCloud
SpeakingOctober 2023
How DevOps Drives Digital Transformation | Digital CxO Summit
TechstrongStrategy
SpeakingSeptember 2023
Cloud Security Turbocharged: A Wild Ride of Innovation, Threats, and Staying Ahead
Security BoulevardCloud Security
SpeakingSeptember 2023
Securing the Cloud: Unlocking the Potential of Cloud-Native Application Protection Platforms
SysdigCloud
BlogSeptember 2023
One Security Leader’s Take on the SEC Cybersecurity Disclosure Rules
MediumCompliance Strategy Security
ArticleSeptember 2023
Revisiting the SolarWinds Incident With the Final SEC Cybersecurity Disclosure Rules
CPO MagazineSupply chain Threats Compliance
SpeakingAugust 2023
Becoming a Cloud Security Ninja: Slice Your SIEM Costs by Pre-Processing Cloud Logs
SysdigCloud Security
MediaAugust 2023
Confusion Surrounds SEC's New Cybersecurity Material Rule
Dark ReadingCompliance Strategy
BlogAugust 2023
Assess Your Readiness Now for the SEC Cybersecurity Disclosure Rules
MediumCompliance Strategy
SpeakingAugust 2023
Cloud Security Turbocharged: A Wild Ride of Innovation, Threats and Staying Ahead | Cloud Native Now 2023
TechstrongCloud Security
SpeakingJuly 2023
Cloud Native Security With Michael Isbitski
Arrested DevOpsCloud Security
ArticleJuly 2023
Manage how you protect your assets at scale with SBOMs
OpenSSFSupply chain
SpeakingJuly 2023
Unpacking Supply Chain & Cloud Security Risks
Black HatCloud Supply chain Security
SpeakingJuly 2023
The Many Faces of Cloud Native | Cloud Native Now 2023
TechstrongCloud
SpeakingJune 2023
Lessons from the Trenches: Maintaining Effective Security in Cloud
SysdigCloud Security
SpeakingApril 2023
Sysdig and Solving for Strategic Challenges in Cybersecurity with Michael Isbitski
Last Week in AWSStrategy
SpeakingApril 2023
Are You Prepared for the New SEC Cyberattack Disclosure Guidelines?
LinkedIn LiveThreats Compliance
ResearchApril 2023
Runtime Insights are Key to Shift-Left Security
SysdigCloud AppSec Security
SpeakingMarch 2023
Dig Deeper! Prioritize Cloud Vulnerabilities and Reduce Container Spending
CSA CloudBytesCloud Vulns
MediaFebruary 2023
Sysdig 2023 report reveals 87 percent of container images have high-security issues
Edge Industry ReviewCloud Security
SpeakingFebruary 2023
A Hacker’s Secrets to Ethically Cracking the Code in Today’s Digital World with Dr. Charlie Miller
SysdigThreats Strategy
ResearchFebruary 2023
Sysdig 2023 Cloud‑Native Security and Usage Report
SysdigCloud Security
MediaFebruary 2023
87 percent of container images have high risk vulnerabilities
BetaNewsCloud Vulns
MediaFebruary 2023
Sysdig Report Surfaces Major Lack of Container Security
Container JournalCloud Security
MediaFebruary 2023
Researchers Claim High-Risk Vulnerabilities Found in 87% of All Container Images
Infosecurity MagazineCloud Vulns
ArticleJanuary 2023
6 Ways to Bolster Security with Infrastructure as Code
Infosecurity MagazineVulns Security
MediaDecember 2022
Protecting your organization from rising software supply chain attacks
VentureBeatSupply chain Threats Strategy
ArticleDecember 2022
Supply Chain Risks Got You Down? Keep Calm and Get Strategic!
Dark ReadingSupply chain Strategy
SpeakingNovember 2022
Managing Cloud Risk Without Slowing App Delivery | CloudNativeDay 2022
TechstrongCloud
SpeakingOctober 2022
Solutions Forum 2022: Is Your SecOps Ready for Cloud and Containers?
SANSCloud
SpeakingOctober 2022
Cyber Solutions Fest 2022: Cloud Security
SANSCloud Security
MediaOctober 2022
GCHQ chief warns of Chinese . US open source software bill advances. Financial Stability Board on crypto regulation.
The CyberWireSupply chain Compliance
MediaSeptember 2022
What IT and Security Teams Should Take Away From the Uber Hack
TechDecisionsThreats Security
MediaSeptember 2022
Uber investigates security breach of its internal systems
SiliconANGLEThreats Security
ArticleSeptember 2022
Will the Cloud End the Endpoint?
Dark ReadingCloud
SpeakingJuly 2022
AWS re:Inforce 2022 - Securing AWS Fargate serverless containers at FINRA
AWS re:InforceCloud
SpeakingJune 2022
A Comprehensive Approach to Cloud Threat Detection and Response
SANSCloud Threats
ResearchJune 2022
A Comprehensive Approach to Cloud Threat Detection and Response
SysdigCloud Threats
SpeakingJune 2022
FIND, FOCUS, and FIX the Cloud Threats that Matter Solutions Forum
SANSCloud
MediaMay 2022
Exposed Kubernetes Clusters, Kubelet Ports Can Be Abused in Cyberattacks
Dark ReadingCloud Threats
MediaApril 2022
Salt Security State of API Security Report Reveals API Attacks Increased 681% in the Last 12 Months
Dark ReadingAPI Threats Security
ResearchMarch 2022
Salt Labs State of API Security Report, Q1 2022
Salt SecurityAPI Security
SpeakingFebruary 2022
Criminal Minds: API Security Edition featuring FBI Cybersecurity Agent and Salt Security
SANSAI API Strategy
BlogFebruary 2022
Wrestling with the Problem of API Sprawl
Salt SecurityAPI
SpeakingJanuary 2022
Anatomy of an API Attack: Elastic Stack Injection
Salt SecurityAPI Vulns Threats
BlogJanuary 2022
Announcing the Salt API Security Maturity Model
Salt SecurityAPI Strategy Security
ResearchJanuary 2022
Salt API Security Maturity Model
Salt SecurityAPI Strategy Security
SpeakingJanuary 2022
API Security Predictions for 2022
SecureWorldAPI Strategy Security
MediaJanuary 2022
API Security, Ransomware Top 2022 Threats
Security BoulevardAPI Threats Security
MediaJanuary 2022
Wie Credential Stuffing unbemerkt bleibt
CSOAPI
SpeakingJanuary 2022
Cloud Native Security Is Getting Better
TFiR InsightsCloud Security
ArticleJanuary 2022
What Happens to My Organization If APIs Are Compromised?
Dark ReadingStrategy
MediaJanuary 2022
The 5 Stages of a Credential Stuffing Attack
TripwireAPI Threats
SpeakingJanuary 2022
How Do They Get In?! Understanding the API Attack Vector
OWASPAPI Threats
MediaJanuary 2022
Salt Security Finds Serious GraphQL API Security Hole
The New StackAPI Security
BlogDecember 2021
Seven API Security Predictions for 2022
Salt SecurityAPI Strategy Security
MediaDecember 2021
Top 15 cybersecurity predictions for 2022
Security MagazineStrategy
BlogDecember 2021
Recap: The 7 Biggest API Security Incidents in 2021
Salt SecurityAPI Security
ArticleDecember 2021
API1:2019 Broken Object Level Authorization
Security BoulevardIdentity
ResearchDecember 2021
API Threat Research: GraphQL Authorization Flaws in Financial Technology Platform
Salt SecurityAPI Threats Identity
MediaDecember 2021
Salt Security Report Surfaces GraphQL API Vulnerabilities
Security BoulevardAPI Vulns Security
MediaNovember 2021
SHARED INTEL: Here’s why it has become so vital to prioritize the security-proofing of APIs
The Last WatchdogStrategy Security
BlogNovember 2021
API Security Evaluation Guide
Salt SecurityAPI Security
ResearchNovember 2021
API Security Evaluation Guide
Salt SecurityAPI Security
MediaNovember 2021
OWASP Addresses API Security
Security BoulevardAPI Security
SpeakingNovember 2021
API MythBusters Chalk Talk: IAM, Gateways, and WAFs
Salt SecurityAPI Identity
ArticleNovember 2021
OWASP API Security Top 10 Explained
Security BoulevardAPI Security
ArticleNovember 2021
API2:2019 Broken User Authentication
Security BoulevardIdentity
ArticleNovember 2021
API3:2019 Excessive Data Exposure
Security BoulevardVulns
ArticleNovember 2021
API4:2019 Lack of Resources & Rate Limiting
Security BoulevardVulns
ArticleNovember 2021
API5:2019 Broken Function Level Authorization
Security BoulevardIdentity
ArticleNovember 2021
API6:2019 Mass Assignment
Security BoulevardVulns
ArticleNovember 2021
API7:2019 Security Misconfiguration
Security BoulevardVulns Security
MediaNovember 2021
API Security for Dummies – and Smart People Too!
Security BoulevardAPI Security
MediaNovember 2021
Building API Context with a New Tech Talk Video Series
Security BoulevardAPI
SpeakingOctober 2021
API MythBusters Chalk Talk: Zero Trust
Salt SecurityAPI
SpeakingOctober 2021
API MythBusters Chalk Talk: Workload Protection
Salt SecurityAPI Cloud
SpeakingOctober 2021
API MythBusters Chalk Talk: Shift-left Security
Salt SecurityAPI AppSec Security
ResearchOctober 2021
API Security for Dummies
Salt SecurityAPI Security
MediaOctober 2021
The Challenge of Regulatory Compliance for Critical Infrastructure
Security BoulevardCompliance
ArticleOctober 2021
API8:2019 Injection
Security BoulevardVulns
ArticleOctober 2021
API9:2019 Improper Assets Management
Security BoulevardAPI
ArticleOctober 2021
API10:2019 Insufficient Logging & Monitoring
Security BoulevardVulns
MediaOctober 2021
Brewer's Token Gaffe Causes Massive PII Breach
Infosecurity MagazineThreats
MediaSeptember 2021
Easily Exploited Elastic Stack API Security Flaw Exposes Data
Security BoulevardAPI Vulns Security
BlogSeptember 2021
API Threat Research: Elastic Stack Misconfiguration Allows Data Extraction
Salt SecurityAPI Vulns Threats
ResearchSeptember 2021
API Threat Research: Elastic Stack Misconfiguration Allows Data Extraction
Salt SecurityAPI Vulns Threats
BlogSeptember 2021
API Security Checklist: API Security Best Practices Guide
Salt SecurityAPI Strategy Security
BlogAugust 2021
REST API Security Best Practices
Salt SecurityAPI Strategy Security
ResearchAugust 2021
API Security Best Practices Checklist
Salt SecurityAPI Strategy Security
ResearchAugust 2021
API Security Best Practices Guide
Salt SecurityAPI Strategy Security
MediaAugust 2021
Salesforce Communities Misconfig Puts Clients, Partners at Risk
Security BoulevardVulns Strategy
MediaAugust 2021
MSSPs Particularly Vulnerable to Cisco FDM Flaw
Security BoulevardVulns
MediaJuly 2021
Salt Security Finds Widespread Elastic Stack API Security Vulnerability that Exposes Customer and System Data
Dark ReadingAPI Vulns Security
ResearchJuly 2021
State of API Security Report, Q3 2021
Salt SecurityAPI Security
MediaJuly 2021
Salt Security 'State of API Security' Report Finds API Attack Traffic has Grown at Triple the Rate of Overall API Traffic
Dark ReadingAPI Threats Security
ResearchJuly 2021
API Threat Research: Detailed Financial Records Exposed on Financial Services Platform
Salt SecurityAPI Threats
BlogJuly 2021
Credential Stuffing - What is a Credential Stuffing Attack and How to Defend Against it
Salt SecurityAPI Threats
SpeakingJuly 2021
Tips To Sharpen Your API Security Skills - Understanding Developers
Salt SecurityAPI Security
SpeakingJuly 2021
Tips To Sharpen Your API Security Skills - Understanding APIs
Salt SecurityAPI Security
BlogMay 2021
What Does the Biden Administration’s Cybersecurity Executive Order Mean for API Security?
Salt SecurityAPI Compliance Strategy
BlogMay 2021
The Peloton API Security Incident - What Happened and How You Can Protect Yourself
Salt SecurityAPI Threats Security
ArticleMay 2021
Lessons learned from the iPhone call recording app vulnerability
Security MagazineVulns
BlogMay 2021
The Experian API Security Incident - What Happened and How can you Protect Yourself
Salt SecurityAPI Threats Security
MediaMay 2021
Experian API Leaked Credit Scores
Security BoulevardAPI Threats
SpeakingApril 2021
Think API attacks are hard? Think again.
Salt SecurityAPI Threats
SpeakingApril 2021
MythBusters API Edition – Developers will build in API security
Salt SecurityAPI Security
SpeakingApril 2021
MythBusters API Edition – Workload protection secures APIs
Salt SecurityAPI Cloud
SpeakingApril 2021
MythBusters API Edition – IAM, API gateways, and WAFs are enough
Salt SecurityAPI Identity
SpeakingApril 2021
MythBusters API Edition – Cloud service providers protect your APIs
Salt SecurityAPI Cloud
MediaApril 2021
7 Modern-Day Cybersecurity Realities
Dark ReadingStrategy
MediaApril 2021
The Experian Data Leak: What You Need to Know
Solutions ReviewThreats
SpeakingApril 2021
MythBusters API Edition - Zero trust is the way
Salt SecurityAPI
BlogApril 2021
How Shift-Left Extremism is Harming your API Security Strategy
Salt SecurityAPI AppSec Strategy
SpeakingApril 2021
5 Common Security Practices That Fall Short Protecting APIs
Salt SecurityStrategy Security
BlogApril 2021
MythBusters API Edition: Zero Trust and its limitations for API Security
Salt SecurityAPI Security
MediaApril 2021
Clubhouse Exclusivity Applies to Membership, Not Data
Security BoulevardStrategy
MediaApril 2021
Leaky Apps Heighten Supply Chain Risk
Security BoulevardSupply chain
BlogApril 2021
Salt Security + MuleSoft – Supercharge Your API Security Strategy
Salt SecurityAPI Strategy Security
SpeakingApril 2021
Security Mythbusting: Dismantling the Top Five API Myths
Infosecurity MagazineAPI Security
MediaMarch 2021
Building Immunity at AppSec Insertion Points
Security BoulevardAppSec
ResearchMarch 2021
Solution Criteria for Container-Focused Cloud Workload Protection Platforms
Gartner (uncredited)Cloud
BlogMarch 2021
Understanding the Security Impacts of the iPhone Call Recording App Vulnerability
Salt SecurityVulns Security
MediaMarch 2021
With Auth0 purchase, Okta Will Boost Access APIs for Developers
The New StackIdentity
ResearchFebruary 2021
The State of API Security – Q1 2021
Salt SecurityAPI Security
MediaJanuary 2021
DevSecOps - Baking in Cybersecurity
Science of SocietyAppSec Strategy
BlogJanuary 2021
Unpacking the Parler Data Breach
Salt SecurityThreats
BlogJanuary 2021
GET ‘https://salt.security/ api/v1/ helloworld?id=michaelisbitski’
Salt SecurityAPI Security
ResearchJuly 2020
Guide to Application Security Concepts
GartnerAppSec Security
ResearchJune 2020
Structuring Application Security Tools and Practices for DevOps and DevSecOps
GartnerAppSec Strategy Security
ResearchMay 2020
Guidance Framework for Securing Kubernetes
GartnerCloud Strategy
MediaMay 2020
Recommended Application Security Testing (AST) Techniques
Security BoulevardAppSec Security
ResearchApril 2020
Containers: 11 Threats and How to Control Them
GartnerCloud
ResearchMarch 2020
How to Deploy and Perform Application Security Testing
GartnerAppSec Security
ResearchDecember 2019
Assessing the Security Capabilities of Salesforce
GartnerStrategy Security
ResearchOctober 2019
2020 Planning Guide for Security and Risk Management
GartnerStrategy Security
ResearchOctober 2019
Decision Point for Securing Application Architecture
GartnerStrategy
ResearchMay 2019
Best Practices for Securing Continuous Delivery Systems and Artifacts
GartnerStrategy
ResearchApril 2019
Protecting Web Applications and APIs From Exploits and Abuse
GartnerVulns AppSec
ResearchDecember 2018
How to Integrate Application Security Testing Into a Software Development Life Cycle
GartnerAppSec Security
ResearchNovember 2018
A Guidance Framework for Establishing and Maturing an Application Security Program
GartnerAppSec Strategy Security
ResearchNovember 2018
Solution Comparison for Cloud-Based Web Application Firewall Services
GartnerCloud AppSec
ResearchAugust 2018
Container Security — From Image Analysis to Network Segmentation, Options Are Maturing
GartnerCloud Security
ResearchJuly 2018
Comparison of Mobile Threat Defense Solutions
GartnerThreats
ResearchJune 2018
Selecting the Right API Gateway to Protect Your APIs and Microservices
GartnerAPI
ResearchMarch 2018
Approaches for Securing Application Development Environments and Artifacts
GartnerStrategy
MediaOctober 2017
BSIMM8 Study Reinforces Benchmarking in Early Stages of Software Security Initiatives
Dark ReadingCompliance Security
ResearchAugust 2017
Assessing the Security Capabilities of Salesforce Sales Cloud
GartnerCloud Strategy Security
ResearchApril 2017
Protecting Web Applications and APIs From Exploits and Abuse
GartnerVulns AppSec
ResearchDecember 2016
A Guidance Framework for Establishing and Maturing an Application Security Program
GartnerAppSec Strategy Security
Nothing matches that combination.
Let's talk
Got questions? Challenges? Just want to explore what's possible? No pressure, no jargon. A real conversation.
Contact Us →