IAT: Identity Access & Trust | CDA.Wiki

Threat IntelligenceTIDThreatIntermediate

Bangladesh Bank SWIFT Heist (2016)

In February 2016, North Korea's Lazarus Group exploited months of persistent network access inside Bangladesh Bank to submit 35 fraudulent SWIFT payment instructions to the Federal Reserve Bank of New York, attempting to steal $951 million. Five transfers totaling $101 million were processed before risk filters triggered. $81 million reached Philippine casinos and was never recovered. The attack exposed a systemic vulnerability in the global financial messaging network: SWIFT's security is only as strong as the weakest connected institution.

2,550 words13 min read

Identity Access & Trust

Kubernetes RBAC

When Your Body Becomes the Attack Surface

Email Security Architecture

Privilege Escalation Techniques

Ransomware Response Playbook

Active Directory Security

Building a Security Program from Scratch

Certificate Management and PKI

Kerberos Authentication Protocol

Security for Manufacturing

Cloud Identity Security

Container and Kubernetes Security

Credential Stuffing and Account Takeover

Cryptographic Key Management

Cyber Threat Landscape: 2025 and Beyond

Security for SaaS Companies

Living Off the Land Techniques

Scattered Spider (UNC3944 / Muddled Libra)

Cybersecurity Due Diligence for M&A

Security for Nonprofit Organizations

Cybersecurity for Small Business

AWS Security Fundamentals

State-Sponsored Cyber Threats: A Global Overview

APT29 (Cozy Bear / Midnight Blizzard)

Azure Security Fundamentals

Initial Access Techniques

HashiCorp Vault Assessment

Google Cloud Security Fundamentals

Single Sign-On (SSO) Architecture

Compliance Audit Preparation for Education

Security Awareness Training for Education

FIDO2 and WebAuthn: Passwordless Authentication

Identity Access and Trust (IAT): Civilization

Cloud Security Strategy for Government

Vendor Risk Management for Education

Kerberos Authentication and Attacks

Identity Governance and Administration (IGA)

Network Security Architecture for Government

PAM Solution Comparison Guide

NotPetya: The Most Destructive Cyberattack in History

MDM Solution Comparison Guide

Password Manager Comparison for Enterprise

Incident Detection and Behavioral Analytics

Insider Threat Program

Lateral Movement Techniques

Vendor Risk Management for Government

Sailpoint Identity Governance Assessment

MITRE ATT&CK Framework

Mobile Device Security

Persistence Techniques

Multi-Factor Authentication (MFA)

PDM Through History: How Rome Defended Its Information

Credential Access Techniques

Phishing

Okta Identity Platform

Physical Security for Cybersecurity

Metaverse Security and Privacy

Okta Identity Platform Assessment

HashiCorp Vault Secrets Management

Zero Trust Reference Architecture

Incident Response Planning for Education

ARPANET Security: When the Internet Had No Defenses

NIST 800-171: Protecting Controlled Unclassified Information

Secure Remote Access

Smart City Cybersecurity

5G and 6G Security Architecture

How to Become a Security Architect

CISSP Preparation Guide

FedRAMP Authorization

Zero Trust Network Architecture Patterns

Security for Healthcare Organizations

Security for Legal and Law Firms

Security for Houses of Worship

Security for Accounting Firms

Security for Construction Companies

The CISO Role

The Civitas Problem: How Zero Possession Architecture Could Secure Democracy

The Living PDM: How Nature, Cities, and Civilizations Mirror Cybersecurity

The Planetary Defense Model: A Complete Framework for Cybersecurity Operations