Tomer Shachar | InsightsNotes on security architecture from Tomer Shachar. A weekly cybersecurity recap and shorter takes on incidents.https://tomersh.neten-usWhat happened in Cybersecurity this week (Oct 30 to Nov 4)https://tomersh.net/insights/2026-11-04-cybersecurity-weekhttps://tomersh.net/insights/2026-11-04-cybersecurity-weekA fake job interview behind a record crypto theft, AI-driven attacks named in official breach disclosures, and why "rotate everything" is the only answer after a platform breach.Wed, 04 Nov 2026 00:00:00 GMTWeeklyAI SecuritySupply Chain"Encrypted at rest" didn't stop this month's wave of secret thefthttps://tomersh.net/insights/2026-11-01-encrypted-at-resthttps://tomersh.net/insights/2026-11-01-encrypted-at-restA platform that runs your code has to be able to decrypt your secrets. Why the controls that decide blast radius live at the issuer.Sun, 01 Nov 2026 00:00:00 GMTSecretsAI PlatformsThe most privileged identity in many Microsoft 365 tenants isn't an admin. It's the backup app.https://tomersh.net/insights/2026-10-22-backup-app-identityhttps://tomersh.net/insights/2026-10-22-backup-app-identityBackup services are de facto tier-0 non-human identities, yet threat models often file them under "third-party integration".Thu, 22 Oct 2026 00:00:00 GMTIdentityThreat Modeling