# Threat landscape

### December 10, 2025  
[The Human Problem: Identity Theft & Broken Access Management](https://www.deepengine.com/insights/the-human-problem-identity-theft-broken-access-management)  
22% of breaches start with stolen credentials. Lessons from MGM, Okta & RedLine—plus 3 IAM fixes that close 90% of your attack surface.

### December 21, 2025  
[Threat management outlook as we head into 2026](https://www.deepengine.com/insights/threat-management-outlook-as-we-head-into-2026)

### November 26, 2025  
[The 36-hour attack window that grounded European flights](https://www.deepengine.com/insights/the-36-hour-attack-window-that-grounded-european-flights)

### October 22, 2025  
[Are AI & LLMs tilted towards bad actors?](https://www.deepengine.com/insights/are-ai-llms-tilted-towards-bad-actors-)

### October 14, 2025  
[Why CPE naming matters for securing infrastructure](https://www.deepengine.com/insights/why-cpe-naming-matters-for-securing-infrastructure)

### September 1, 2025  
[SOC 2: A Flexible Security Framework to Build Trust and Resilience for Tech Companies](https://www.deepengine.com/insights/soc-2-a-flexible-security-framework-to-build-trust-and-resilience-for-tech-companies)

### June 30, 2025  
[The vibe coding problem: a flood of buggy apps = goldmine for hackers](https://www.deepengine.com/insights/the-vibe-coding-problem-a-flood-of-buggy-apps-goldmine-for-hackers)

### May 28, 2025  
[ISO 27001:2022 Annex A 8.8: new standard for SMB security](https://www.deepengine.com/insights/iso-27001-2022-annex-a-8-8-new-standard-for-smb-security)

### March 30, 2025  
[Why do hackers target small businesses?](https://www.deepengine.com/insights/why-do-hackers-target-small-businesses-)

### December 2, 2024  
[Navigating compliance: how Deepengine democratizes cybersecurity for SMBs](https://www.deepengine.com/insights/navigating-compliance-how-deepengine-democratizes-cybersecurity-for-smbs)
