Skip to content

How to Use a Passkey for Your Coinbase Account?

Securing cryptocurrency assets is non-negotiable. With threats like account takeovers and phishing becoming rampant, traditional passwords are the weak link. As a leader in the exchange space, Coinbase has adopted passkeys as a cutting-edge security defense.

This guide will explain the technology behind a Coinbase passkey, outline why it drastically improves your security posture, and detail the steps required for setup.

What is a Coinbase Passkey?

A passkey is a next-generation digital credential far superior to a standard password. Instead of typing a complex string of characters, your device—like your phone or laptop—manages a unique, secret cryptographic key for you. This key is inherently phishing-resistant and exceptionally secure.

When you set up a passkey, your device generates a pair of keys: a public key (the lock) given to Coinbase, and a private key (the unique opener) stored securely and invisibly on your device. To sign in, you use your biometrics (face scan or fingerprint) to authorize the device to generate a one-time signature, proving your identity instantly. A Coinbase passkey applies this powerful, seamless, and biometrically secured login directly to your account, effectively replacing your traditional password.

Why Passkeys are Essential for Crypto Security

Security is paramount when dealing with irreversible crypto transactions. A passkey is a critical upgrade because it immediately neutralizes the most common compromise vectors:

  • Superior Phishing Resistance: Passkeys are cryptographically bound to the legitimate Coinbase domain. A fake website simply cannot trick your device into releasing the passkey, stopping the vast majority of phishing attacks cold.
  • Eliminates Credential Reuse: Since every passkey is unique to Coinbase, an attacker cannot use a password stolen from another data breach to gain access to your crypto funds.
  • Biometric Simplicity: The login process is made easier and faster, improving the user experience without sacrificing top-tier security.

Implementation Nuances and Challenges

While highly beneficial, the current passkey implementation introduces unique user experience (UX) hurdles:

  • Coinbase still mandates Two-Factor Authentication (2FA) alongside the passkey during setup and login, adding an extra step to the process.
  • On mobile platforms (Android/iOS), the experience relies on non-native browser views (Chrome Custom Tab / SFSafariViewController), which can feel less fluid than a true native application integration.
  • There have been reports of potential issues with single-device passkey creation on Windows 11 with the Chrome browser, potentially excluding some Windows users from the seamless setup process, likely due to account recovery complexities.

How to Set Up Your Coinbase Passkey

The setup process is guided by Coinbase prompts, but here is an overview for both web and mobile environments:

Web Browser Setup

  1. Sign in to your Coinbase account and go to Security settings.
  2. Select the 2FA Settings tab.
  3. Find and select the Passkey option under Available methods.
  4. Select Add Passkey and follow your browser’s prompts to finalize the creation.

Mobile App Setup

  1. Sign in to the Coinbase app.
  2. Select the 9-dot button in the top left, then go to Profile & Settings.
  3. Select the Security tab, then choose Change security settings.
  4. Select Upgrade your two-factor authentication, and then select Passkey.
  5. Follow the prompts, using your device’s biometrics (fingerprint or face scan) to create and save the passkey.

Best Practices for Managing Coinbase Passkeys

Passkeys shift security responsibility to you, necessitating new security habits, especially regarding recovery:

  • Enable Cloud Sync: When prompted, save your primary Coinbase.com login passkey to a cloud provider (like Google or iCloud). This syncs the key, ensuring account recovery even if you lose the original device.
  • Understand Wallet Risk: The passkey for the Coinbase Smart Wallet is fundamentally different—it replaces your 12-word seed phrase. Deleting this passkey permanently loses your funds if you do not have the separate recovery key. The stakes are infinitely higher here.
  • Use a Cross-Platform Manager: Built-in managers (Apple, Google) create data silos across different ecosystems. For true cross-platform control, a dedicated passkey manager is essential.

Effectively Manage Your Passkeys with NordPass

While Coinbase provides top-tier security, managing passkeys across all your different services can become complex. NordPass simplifies this process by allowing you to securely store, manage, and share your passkeys alongside all your other sensitive data.

Instead of scattering keys across various devices and competing ecosystems, NordPass centralizes them in one encrypted vault, accessible exactly where and when you need them.

About NordPass
NordPass is developed by Nord Security, a company leading the global market of cybersecurity products.

The web has become a chaotic space where safety and trust have been compromised by cybercrime and data protection issues. Therefore, our team has a global mission to shape a more trusted and peaceful online future for people everywhere.

About Version 2 Limited
Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

Understanding the Cloud Security Gateway (CSG)

Your network is constantly transmitting data between users, applications, and the cloud. As digital tools and remote work reshape connectivity, organizations need more than traditional firewalls. Every unmonitored transfer creates a potential vulnerability for unauthorized access, hidden threats, and data leaks. A Cloud Security Gateway (CSG) serves as your digital checkpoint, inspecting every connection to enforce controls and maintain secure operations.

We’ll break down what a CSG is, how it functions, and why it’s vital for modern business resilience.

What is a Cloud Security Gateway?

A CSG is a network security service designed to filter, monitor, and control all data traffic flowing between endpoints, cloud services, and on-premises applications. It acts as an enforcement point, applying security policies, preventing data loss, and blocking external threats before they impact your systems.

Simply put, the gateway sits between your users and the internet. Every data request—whether browsing a website or accessing a SaaS platform—is routed through the CSG. It scans for malicious content, applies your organization’s compliance rules, and ensures only safe traffic is allowed. This solution frequently incorporates multiple security functions and is often referred to as a Secure Web Gateway (SWG) when delivered as a cloud service.

How Cloud Security Gateways Function

CSGs inspect and manage every data exchange, ensuring consistent protection for users regardless of their location. This process happens in real time:

  • Traffic and Content Inspection: Every file and request is analyzed instantly. The system detects malicious content, phishing attempts, or policy violations before data can enter or leave the network.
  • Policy Enforcement: The gateway applies your rules—such as blocking risky sites, limiting access to certain applications, and ensuring regulatory compliance is maintained.
  • Threat Prevention: Using advanced analytics, it identifies suspicious activity, malware, and potential zero-day attacks, stopping them from spreading across the environment.
  • Data Loss Prevention (DLP): It actively monitors sensitive information transmitted across the network, preventing unauthorized or accidental data leaks via uploads, email, or messaging platforms.

Core Features of a CSG

A secure cloud gateway integrates several functions that are crucial for protecting a modern, mobile workforce:

  • URL and Content Filtering: Manages web access by allowing or blocking predefined website categories to mitigate threats and boost productivity.
  • Application Control: Governs access and usage of cloud applications like Slack or Salesforce, ensuring only approved apps are active.
  • Malware and Phishing Protection: Scans all files and links for malicious code, providing real-time threat prevention.
  • SSL/TLS Inspection: Decrypts encrypted web traffic to inspect for hidden threats, ensuring full visibility across all data channels.
  • DLP Capabilities: Prevents sensitive corporate data from unintentionally exiting the network, which is vital for regulatory compliance.
  • User and Device Authentication: Verifies the identity and security posture of the device before access is granted, supporting secure hybrid work.

Top Implementation Scenarios for CSGs

A Cloud Security Gateway provides flexible protection across many common business challenges:

  • 1. Secure Remote and Hybrid Teams: Ensures secure remote access and consistent protection across all devices and untrusted networks, giving IT teams full visibility into remote activity.
  • 2. Protecting Cloud Workflows: Provides continuous monitoring of SaaS applications, preventing leaks and guaranteeing that sensitive files stay within approved environments.
  • 3. Controlling Shadow IT: Detects and blocks unapproved cloud applications, helping IT administrators regain control, enforce security policies, and stop risky usage before a data breach occurs.
  • 4. Improving Compliance Efforts: Generates detailed logging and reports on web activity, simplifying audits and ensuring that data protection policies are uniformly enforced across all users and regions (e.g., GDPR or HIPAA).
  • 5. Advancing Threat Detection: Centralizes security services to collect traffic analytics, making anomalies easier to spot and allowing for more efficient, real-time incident response.

Measurable Business Benefits

CSGs deliver tangible value by improving security posture, streamlining IT operations, and enhancing user experience:

  • Improved Security: Continuous scanning prevents malware, ransomware, and phishing across all internet access points.
  • Enhanced Performance: Cloud-based solutions distribute filtering tasks across global networks, ensuring faster secure web access with minimal latency, even for remote users.
  • Simplified Management: Centralizes control, allowing IT teams to enforce policies, generate compliance reports, and visualize network activity from a single dashboard.

CSG Limitations

A gateway is a robust security layer, but it is not an all-in-one solution:

  • Limited non-web visibility: A traditional SWG focuses primarily on web traffic and cannot monitor all forms of internal app communication or unmanaged endpoints.
  • Potential latency: Deep inspection (especially SSL/TLS) can sometimes introduce delays, though distributed cloud architectures work hard to mitigate this.
  • Integration effort: Achieving full security requires proper configuration alongside identity management and endpoint security tools.

Strengthen Cloud Security with NordLayer

NordLayer delivers comprehensive protection, integrating Secure Web Gateway (SWG), Zero Trust Network Access (ZTNA), and Cloud Firewall into one flexible, cloud-based platform.

  • Advanced Threat Prevention: Real-time filtering blocks threats, phishing, and malicious downloads at the network edge.
  • Data Protection: Masks IP addresses and controls access to internal resources, protecting sensitive information even on untrusted networks.
  • Secure Remote Access: ZTNA ensures verified employees connect safely to company systems and cloud applications without performance compromise.
  • Policy-Based Control: Enables global policy enforcement by user group, device, or location for consistent compliance and scalability.

NordLayer simplifies management and enhances visibility, serving as a scalable backbone for secure access and maintaining trust in every digital connection.

About Nord Security
The web has become a chaotic space where safety and trust have been compromised by cybercrime and data protection issues. Therefore, our team has a global mission to shape a more trusted and peaceful online future for people everywhere.

About NordLayer
NordLayer is an adaptive network access security solution for modern businesses – from the world’s most trusted cybersecurity brand, Nord Security.

The web has become a chaotic space where safety and trust have been compromised by cybercrime and data protection issues. Therefore, our team has a global mission to shape a more trusted and peaceful online future for people everywhere.

About Version 2 Limited
Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

Data Breach Trends You Need to Know Now

Unprecedented Incidents, Evolving Attack Methods, and the Shift to Zero Trust

As digital transformation accelerates globally, data breaches have become a front-line threat to nations, industries, and individuals. The severity of these incidents has reached unprecedented levels. In the first half of 2025 alone, there were 1,034 reported incidents—a nearly 15% increase year-over-year. This surge signals an urgent need to rethink cybersecurity frameworks and user awareness. Today, breaches represent complex risks, including financial damage, brand reputation loss, and massive regulatory penalties.

2025: A Year of Catastrophic Mega Breaches

The year 2025 saw a wave of catastrophic breaches. One alarming case involved the exposure of over 16 billion login credentials accumulated from years of various attacks across major global platforms like Google, Apple, and Facebook. This massive dataset, circulating on the dark web, starkly revealed how vulnerable login credentials and passwords are in today’s digital environment, essentially exposing more than one account per internet user worldwide.

Key Causes and Methods Behind the Attacks

Attackers are meticulously probing corporate infrastructures for exploitable weaknesses. Recent breaches highlight several common vectors:

  • Cloud Misconfigurations: A Growing Attack Vector

    Breaches from misconfigured cloud environments and weak access controls are rising sharply. IBM reports that these configuration errors now account for roughly 40% of corporate data breaches. This is exacerbated by the rapid adoption of AI, where exposed API keys or training datasets in the cloud are increasingly common.

  • Credential Theft and Resale on the Rise

    Credential stuffing attacks have exploded, using leaked emails and passwords to attempt logins across thousands of sites. These attacks are now enhanced with deepfake technology and social engineering to impersonate real employees and gain system access. Companies must urgently prioritize technical defenses and employee awareness.

  • Long-Term Network Intrusions

    The notable Finwise incident involved attackers infiltrating the internal network for months, continuously exfiltrating customer data due to weak access control and inadequate monitoring. Legacy servers and delayed patching offered hackers prolonged, undetected access.

  • The Expanding Market for Stolen Data

    Breaches now feed a growing black market where stolen credit info and medical records are traded. Hacker groups even “data launder” the information to increase its resale value, leading to long-term exploitation and damage.

Effective Security Strategies Against Data Breach

In response to escalating threats, enterprises are evolving their strategies. The most essential pillars today are not optional—they are integral to modern cybersecurity culture:

  • The Rise of Zero Trust Security: This model is built on the principle of “never trust, always verify.” It continuously verifies every access request and restricts access to the minimum required level, effectively blocking account takeovers and long-term intrusions by assuming internal networks are already compromised.
  • Strengthening Authentication to Prevent Account Theft: Since weak authentication is the starting point for many breaches, organizations are rapidly adopting Multi-Factor Authentication (MFA) and passwordless technologies to create secure and transparent identity verification environments within a Zero Trust framework.
  • Encryption: The Last Line of Defense: Strong firewalls are not enough unless the data itself is encrypted. As seen in several 2025 incidents, sensitive data stored in plaintext is immediately usable by attackers. Encryption ensures that even compromised data remains inaccessible, serving as the most definitive final line of defense.

A Turning Point in Cybersecurity Awareness

The sheer volume and complexity of 2025 data breaches demand a dramatic shift in our perception of data security. Defending against threats is increasingly difficult without continuous investment and proactive infrastructure management.

Organizations must adhere to foundational security principles while integrating the latest technologies for prevention, detection, and response. Likewise, individuals should make secure practices—such as using strong passwords, enabling two-factor authentication, and avoiding suspicious links—a permanent part of their daily routines.

Penta Security, a top global cybersecurity company, continues to emphasize the need for adaptive and comprehensive solutions to combat these evolving threats. With a focus on innovation and global cybersecurity leadership, Penta Security is helping organizations worldwide stay ahead of data breach risks.

Cyber resilience starts with visibility and verification.

About Penta Security
Penta Security takes a holistic approach to cover all the bases for information security. The company has worked and is constantly working to ensure the safety of its customers behind the scenes through the wide range of IT-security offerings. As a result, with its headquarters in Korea, the company has expanded globally as a market share leader in the Asia-Pacific region.

As one of the first to make headway into information security in Korea, Penta Security has developed a wide range of fundamental technologies. Linking science, engineering, and management together to expand our technological capacity, we then make our critical decisions from a technological standpoint.

About Version 2 Limited
Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

The Future of Identity Security: Convergence Around Authentication, Authorization, and Governance

Why modern security starts with identity-defined access control.

What to Expect in This Article

This blog explores the emerging convergence of identity security disciplines—such as authentication, authorization, and governance—into a unified identity control plane. Readers will gain insight into the strategic shift toward identity-defined security as the foundation of modern digital trust across hybrid and multi-cloud environments.

The Three Core Control Planes of Identity Security

As organizations advance their identity maturity, we’re seeing a strategic convergence—not just of technologies, but of security disciplines. What began as separate IAM, PAM, and CIEM initiatives is now folding into a broader, unified vision driven by 3 core control planes:

  • 1. Authentication – “Are you who you claim to be?”

    Authentication is evolving far beyond usernames and passwords. We’re entering an era of continuous, risk-adaptive identity validation that spans the session lifecycle:

    • Phishing-resistant auth (e.g., FIDO2, passkeys) becomes default.
    • Contextual signals (location, device health, behavioral baselines) drive real-time risk scoring.
    • Session awareness means access is interrupted or revalidated on the fly if risk rises mid-session.
    Takeaway: Authentication is becoming dynamic and continuous; the login event is just the beginning of trust negotiation.

  • 2. Authorization – “What should you be able to do?”

    This is where convergence accelerates. Traditional RBAC/ABAC systems are giving way to:

    • Policy-as-code frameworks (e.g., OPA, Cedar) to express entitlements with precision and portability.
    • Fine-grained authorization enforced deep within APIs, apps, and data layers, not just at login.
    • Decentralized enforcement: microservices, SaaS apps, and APIs can query centralized authorization decisions in real-time.
    Takeaway: Attackers thrive when authorization logic is inconsistent. Converged authorization closes privilege gaps and enables real-time governance enforcement.

  • 3. Governance – “Is access appropriate, accountable, and auditable?”

    Governance is moving from an annual audit exercise to a real-time, risk-aware function, driven by:

    • Identity graphs showing live access relationships, policy conflicts, and privilege escalations.
    • Automated access reviews triggered by behavior or role changes, not just calendars.
    • Business-user alignment: Non-technical stakeholders can understand and attest to access logic using plain language.

    Real-World Example: Segura®’s Privileged Access Management

    One of Latin America’s largest retail banks, facing challenges with fixed admin passwords, poor auditability, and non-compliance (PCI DSS, SOX) across 5,000+ branches, deployed Segura®.

    Segura® introduced SSH integration, two-factor authentication, automated auditing, and rapid password rotation (under 4 hours). The result was full compliance with PCI DSS & SOX and a ~94% reduction in privilege abuse.

    Takeaway: Governance is moving from an afterthought to governance-as-a-service, embedded in every part of the identity lifecycle.

The Evolution of Identity Security: From Passwords to AI-Driven Policy

To understand the current convergence, we must trace the maturity layers of identity security:

  1. Password Managers: Secured the front door by storing and autofilling credentials. Core model: static secret grants access.
  2. Privileged Account Management (PAM): Shifted focus to high-risk accounts (root users, domain admins), ensuring credentials were vaulted and rotated. Focus: who had powerful access.
  3. Privileged Access Management (Extended PAM): Evolved to control when and how privileges were used, introducing Just-in-Time (JIT) access and session monitoring. Focus: dynamic access-based enforcement.
  4. Cloud and CIEM Integration: With cloud adoption, Cloud Infrastructure Entitlement Management (CIEM) arose to analyze sprawling cloud identities and enforce least privilege across IaaS, PaaS, and SaaS.
  5. Authorization and Policy-Driven Access: The current frontier, where fine-grained, contextual policy (e.g., OPA, Cedar) is embedded directly into applications and APIs. Focus: defining access logic as portable, versioned code.

From Vaults to Visibility to Control: The Maturity of Identity Security

  • Password managers secured the front door.
  • PAM locked down the keys to the kingdom.
  • CIEM surfaced risk in complex cloud environments.
  • Authorization delivers real-time access control, everywhere.

As these layers converge, identity security becomes proactive, pervasive, and programmable. We are now defining *how access works* at every layer through policy, context, and automation.

Why Identity Security Convergence Matters

Traditional silos (IAM for provisioning, PAM for vaulting, CIEM for cloud, GRC for policy) are no longer fast or flexible enough for modern architectures. As identity becomes the true control plane for hybrid, multi-cloud, and Zero Trust models, security leaders are shifting to a converged identity fabric focused on:

  • Unified identity context across all environments.
  • Centralized policy decisions, with distributed enforcement.
  • Continuous assurance and remediation, not point-in-time validation.

Identity-Defined Security: The Future of Access Control

The future is clear: identity will define and govern access to every digital interaction, dynamically and intelligently. This means:

  • Identities are continuously verified.
  • Access is adaptively authorized.
  • Entitlements are transparently governed.

Along with reducing breach risk, this is about building trust into the fabric of everything we build, access, and automate.

The Future of Identity Security: Key Takeaways

The next decade will be about convergence, where identity security isn’t layered on top of infrastructure, but woven into its very core.

As defenders, we don’t just need to be security experts. We must be identity architects, fluent in the language of authentication, authorization, and governance, and ready to build the trust fabric that will carry our organizations forward.

About Segura®
Segura® strive to ensure the sovereignty of companies over actions and privileged information. To this end, we work against data theft through traceability of administrator actions on networks, servers, databases and a multitude of devices. In addition, we pursue compliance with auditing requirements and the most demanding standards, including PCI DSS, Sarbanes-Oxley, ISO 27001 and HIPAA.

About Version 2 Limited
Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

Cloud Strategy in 2025: Why Thinfinity VDI on OCI Beats AWS Workspaces & Azure AVD

In late October 2025, two of the world’s most powerful cloud platforms—AWS and Microsoft Azure—went down in spectacular fashion. Within just a week, millions of users and hundreds of global businesses were caught off guard as essential apps, services, and infrastructure ground to a halt. It was more than an inconvenience—it was a wake-up call.

If you’re an IT leader, CISO, or cloud strategist, now is the time to reevaluate your cloud stack, your resilience posture, and—most importantly—your assumptions. The stakes have changed.

The Hidden Cost of Hyperscale Cloud Outages

On October 19, AWS’s us-east-1 region—its most critical hub—was hit by a silent time bomb: a race condition in the DNS update system for DynamoDB. This incident exposed architectural dependencies. EC2 stopped launching instances, S3 buckets became unreachable, and IAM propagation stalled. It took more than 15 hours to fully stabilize.

The week wasn’t over. On October 29, Azure stumbled with a global faceplant. A misconfigured update to Azure Front Door propagated an invalid configuration that crippled traffic routing across the entire Azure network. Suddenly, Microsoft 365 services—including Outlook, Teams, and SharePoint—couldn’t authenticate, and even critical infrastructure like Heathrow Airport’s systems went offline.

These weren’t just technical incidents. They were business continuity failures that exposed how deeply entangled enterprise operations have become with centralized cloud service architectures.

Cloud Confidence Is Not a Strategy

While AWS and Azure offer world-class infrastructure, their outages exposed architectural flaws:

  • Centralized control planes: AWS’s heavy reliance on us-east-1 means a single-region failure can disrupt global operations.
  • Edge-level configuration risks: Azure’s Front Door misfire revealed that a bad update to a single global component can bring down all regions simultaneously.

The lesson? No matter how “enterprise-grade” your provider claims to be, complexity and centralization are enemies of resilience.

Why OCI Should Be in Every Enterprise’s Cloud Playbook

Oracle Cloud Infrastructure (OCI) offers a design philosophy increasingly aligned with enterprise needs in a post-outage world.

Built for Resilience from the Ground Up

  • OCI treats each region as a fault-isolated domain, eliminating hidden dependency on a single master region.
  • It is built with a flat, non-blocking network fabric, guaranteeing low-latency and high-throughput performance with minimal variability—ideal for latency-sensitive workloads like VDI.

Transparent, Predictable Pricing

OCI’s model avoids the ambiguity of competitors, offering global flat-rate pricing, lower data egress fees, and no surprise charges—perfect for predictable VDI Total Cost of Ownership (TCO).

Compliance-Ready and Globally Available

OCI supports critical compliance frameworks (FedRAMP, HIPAA, GDPR) and offers sovereign cloud options for the EU and UK, simplifying compliance without patchwork complexity.

Thinfinity VDI on OCI: Modern Remote Access Without the Risk

Thinfinity VDI is a modern, browser-based virtual desktop platform designed for scalability and security. Deployed on OCI, it becomes an incredibly resilient alternative to Amazon Workspaces, AppStream, or Azure Virtual Desktop (AVD).

What Makes Thinfinity + OCI Different?

  • No Regional Choke Points: Thinfinity VDI instances can be deployed in isolated regions without dependency on centralized brokers or services.
  • HTML5-Based Delivery: No client software, no VPNs required—just secure, fast access from any device.
  • Enterprise-Grade Security: Built-in MFA, SAML/SSO support, device posture checks, and full session auditing.
  • Hardware Acceleration: Leverages OCI’s GPU shapes for high-performance desktops (e.g., CAD, trading floors).
  • Hybrid- and Edge-Friendly: Supports both cloud and on-prem environments for real-world flexibility.

By the Numbers: Why It Matters

While Gartner notes over 85% of cloud failures through 2025 are due to customer misconfigurations, the October 2025 outages highlight the risk of internal cloud architecture errors that ripple across the customer base:

  • The AWS DNS incident affected over 70% of global traffic relying on us-east-1 region APIs.
  • The Azure Front Door misconfiguration impacted an estimated 300 million active Microsoft 365 users worldwide for up to 8 hours.
  • Enterprises that experienced downtime saw e-commerce platforms reporting 20–30% daily sales drops, translating to massive hard business costs and lost customer trust.

The Story That Didn’t Make Headlines—But Should

While AWS and Azure scrambled, Oracle Cloud Infrastructure quietly stood firm. Its architecture, designed to isolate fault domains and avoid hidden dependencies, delivered exactly what infrastructure should: zero disruption for businesses running latency-sensitive, VDI, or compliance-heavy applications on OCI. This resilience makes OCI a front-runner for reliability in a multi-cloud era.

What CIOs and CISOs Should Do Right Now

Don’t wait for the next outage to re-evaluate your cloud and desktop strategy:

  1. Audit your blast radius: Determine how many services break if your primary cloud region fails.
  2. Design for failure: Use OCI’s isolated regions and fault domains to break dependencies and isolate failure domains.
  3. Evaluate alternatives: Test Thinfinity VDI on OCI as a secure, cost-effective alternative to your current solution (Workspaces/AVD).
  4. Embrace multi-cloud reality: Start building the foundations for portability and resilience across multiple clouds.

Final Thought: Make Resilience Your Competitive Advantage

The past few weeks have shown that resilience is what separates leaders from the rest. OCI and Thinfinity together offer a secure, scalable VDI strategy ready for whatever the cloud throws at you next.

About Cybele Software Inc.
We help organizations extend the life and value of their software. Whether they are looking to improve and empower remote work or turn their business-critical legacy apps into modern SaaS, our software enables customers to focus on what’s most important: expanding and evolving their business.

About Version 2 Limited
Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

AI Governance: Essential Policies Your IT Team Needs Now

Governing Data, Identity, and Integrations for Secure AI Adoption at Scale

Artificial intelligence (AI) has rapidly shifted from an experimental project to a core component of IT strategy. Most organizations are either already using AI or actively planning its widespread deployment. This massive shift requires IT teams to urgently rethink how they manage infrastructure, secure identities, and protect sensitive data.

Rapid adoption introduces significant risks. AI systems interact with critical infrastructure, process confidential information, and may act autonomously. Without robust governance, this leads to security gaps and major compliance failures. The policies you implement today will determine whether AI becomes a competitive advantage or a costly liability.

The Mandate: Governing AI to Prevent ‘Shadow AI’

Most IT leaders are deeply concerned about AI adoption spiraling out of control, with a high percentage of organizations worried about unchecked integrations and compliance exposures. Good governance is the solution. Clear policies establish where AI can be used, who must approve new tools, and how usage will be monitored.

The Risk of Shadow AI

Policies are essential for preventing “Shadow AI,” where teams bypass IT oversight to deploy unapproved tools. This lack of visibility can instantly open doors to data leakage and intellectual property exposure. Proactive governance ensures fewer surprises and better protection for critical systems.

Five Core AI Governance Policies

To move forward securely, IT leaders must define the rules of engagement in these five areas:

  • 1. Formal Integration Review and Approval: Every new AI integration must follow a formal review process led by IT security or architecture teams. This policy ensures mandatory security scans, data flow reviews, and compliance validation occur before a tool goes live.
  • 2. Identity and Access Management (IAM) for Machines: AI tools rely on service accounts and bots, which are often poorly managed. Policy must mandate strong IAM practices, including limiting permissions for service accounts to the minimum required and requiring regular rotation of API keys and credentials.
  • 3. Strict Data Governance and Classification: AI models are only as trustworthy as their input data. Policy must enforce data classification (e.g., Public, Confidential) and mandate that sensitive data is encrypted, cleaned, and validated before being used for AI training or inference. This keeps systems reliable and audit-ready.
  • 4. Monitoring and Incident Response Framework: Visibility is key. Policy must define which AI-related events (identity activity, integrations, data access) are logged, what security thresholds trigger alerts, and how AI-related incidents are escalated and investigated by response teams.
  • 5. Change Management and Documentation: Every deployed AI tool or integration requires a detailed paper trail. Policy must mandate thorough documentation of the tool’s purpose, risk assessment, and data sources, along with logging all subsequent changes and updates. This streamlines auditing and prevents unauthorized deployments.

Your Next Step Toward Leading with AI

AI is a permanent part of modern IT. The goal is no longer to block its use, but to govern it in a way that is secure, scalable, and aligned with business goals. By setting clear policies now—approving integrations formally, managing machine identities carefully, protecting data, monitoring activity, and documenting every change—your team gains the control necessary to use AI safely.

Take action early: Implement these governance steps to avoid costly security issues and compliance problems later.

For deeper insights into how organizations like yours are adopting and securing AI, download JumpCloud’s latest IT Trends Special Report on AI.

Leading with AI requires control, not chaos.

About JumpCloud
At JumpCloud, our mission is to build a world-class cloud directory. Not just the evolution of Active Directory to the cloud, but a reinvention of how modern IT teams get work done. The JumpCloud Directory Platform is a directory for your users, their IT resources, your fleet of devices, and the secure connections between them with full control, security, and visibility.

About Version 2 Limited
Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

ESET to aid MSPs by integrating with ConnectWise Asio

  • The ESET PROTECT console plugin for ConnectWise Asio opens up more options for MSPs.
  • This integration empowers MSPs with better tools to perform their most common tasks more easily, saving them time while improving their legal and insurance requirements.
  • MSP customers benefit thanks to easier issue solution and deeper automation options made available via this integration.

BRATISLAVA — November 07, 2025 — ESET, a global leader in cybersecurity solutions, today announced a new major integration of its ESET PROTECT Platform with ConnectWise Asio, a modern remote monitoring and management (RMM) solution.

Integrations are rather important these days, as neither vendors nor businesses can go about their daily duties without juggling a diverse set of solutions in their environments all at the same time. MSPs especially, whose task is to monitor several client environments with hundreds of seats each, might find it difficult to operate efficiently. Thus, by integrating their toolsets into unified solutions, they can make their jobs a whole lot easier.

MSPs usually play favorites, choosing a preferred RMM/PSA tool to do their job efficiently. ESET, as a partner and channel-focused cybersecurity vendor, understands this, and develops and maintains support for all the most prevalent RMM and PSA tools out there, with more coming in the future.

ConnectWise Asio is a new flagship product that enables one-click deployment of the ESET PROTECT management agent, helping MSPs stop threats proactively. By deploying ESET through ConnectWise’s product, MSPs can effectively streamline their security workloads by means of our powerful ESET Endpoint Security product, ESET Full Disk Encryption, or even the XDR-enabling component of the ESET PROTECT Platform, ESET Inspect, a powerful, AI-native detection and response solution.

With these capabilities at hand, MSP administrators supporting Windows machines will find their security tasks easier than before.

“ESET is a partner to thousands of MSPs. Thanks to the ESET MSP Program, we have a deep understanding of their needs and woes, for which we tirelessly seek to provide easy-to-use solutions. Many of our integrations are focused on streamlining MSP operations, as evidenced by our support of Kaseya VSA X, Datto RMM, or SuperOps’ unified PSA-RMM platform. With the ConnectWise Asio RMM integration, we remain firm in our commitment to help our MSP partners in the best way we can, by supporting their efforts and growth,” said Robert Jones, Global Channel Business Developer at ESET.

ESET cares about its MSP partners; therefore, our mission is to provide easy-to-use, highly functional integrations to work with their tools. It’s a symbiotic relationship, one that we hope to continue so we can keep sophisticated threats at bay and our MSP friends thriving without concessions.

Learn more about the ConnectWise Asio RMM.

Learn more about seamless ESET integrations to streamline your workloads.

Discover the AI-native power of the award-winning ESET PROTECT Platform and its modules.

Explore the benefits of the ESET MSP Program and partner with us to reap extensive rewards.

About ESET
For 30 years, ESET® has been developing industry-leading IT security software and services for businesses and consumers worldwide. With solutions ranging from endpoint security to encryption and two-factor authentication, ESET’s high-performing, easy-to-use products give individuals and businesses the peace of mind to enjoy the full potential of their technology. ESET unobtrusively protects and monitors 24/7, updating defenses in real time to keep users safe and businesses running without interruption. Evolving threats require an evolving IT security company. Backed by R&D facilities worldwide, ESET became the first IT security company to earn 100 Virus Bulletin VB100 awards, identifying every single “in-the-wild” malware without interruption since 2003.

About Version 2 Limited
Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

Announcing Graylog Illuminate v7.0


ADDED: New Content Packs & Features

  • Symantec Proxysg (419)

    Added alert_severity_level mapping based on event_action where applicable.

  • Checkpoint FW (2917)

    Added support for additional vendor_event_action values, including encrypt and decrypt. Restructured existing vendor fields to better align with log output: vendor_event_outcome is now vendor_event_action; vendor_event_outcome_reason is now vendor_event_action_reason; vendor_event_action is now vendor_event_operation.

  • Bitdefender GravityZone (3059)

    Added support for New Extended Incident logs. Included basic parsing for RPC formatted GravityZone logs for possible future extension via Filebeat testing.

  • Windows Security (2836)

    Added support for status code 0xC0000413 – STATUS_AUTHENTICATION_FIREWALL_DENIED.

  • Microsoft IIS Content Pack (1067)

    New content pack for Microsoft IIS (Internet Information Services), which is used for hosting web applications and services on Windows. Integrates tightly with ASP.NET and Windows Server ecosystem.

  • AWS Kinesis Content Pack (3076)

    New pack for Amazon Kinesis, supporting the parsing and categorization of AWS VPC Flow logs via AWS Kinesis for real-time data streaming and analysis. Future support for other log types may be added.

  • 1password Content Pack (2993)

    New content pack for 1Password logs, supporting the centralized storage and management of credentials, API keys, and sensitive information for improved security and simplified credential management.

  • Cisco Business 350 Series (CBS) (2263)

    New content pack for Cisco Business 350 Series Switches, supporting managed Layer 3 network switches designed for small and medium-sized businesses.

  • F5 BIG-IP (1137)

    Added a Content Pack that supports the AFM and ASM module.

FIXED: Bugs and Issues

  • NetFlow (2851)

    Fixed IPFIX message identification and added support for different set fields.

  • Bitdefender (3115)

    Fixed wrong input name.

  • Cisco ISE (3004)

    Modified base extraction regex to make syslog header info optional, enabling sending to a syslog or raw tcp input.

  • Symantec ProxySG (3125)

    Moved alert_severity_level lookup data to its own .csv to address lookup complaint of duplicate values.

  • Linux Auditbeat (2928)

    Corrected issue mapping vendor_event_type: changed-promiscuous-mode-on-device.

  • Cisco ISE (3019)

    Fixed CmdSet parsing so the full command is returned as vendor_cmdset, dropping CmdAV and CmdArgAV.

  • Bitdefender GravityZone (3007)

    Fixed wrong search path in the New Incidents Count widget.

  • Curated Alerts (2583)

    Improved rule: Illuminate – Windows Security – Active Directory Database Snapshot Via ADExplorer. The detector now covers execution of the 64-bit variant of ADExplorer.

  • Core DNS Processing (2675)

    Fixed filter causing inconsistent results in the dashboard.

CHANGED: Updates and Streamlining

  • NetFlow (3074)

    Changed NetFlow IPv4/IPv6 renames and field types.

  • Cisco IOS (2823)

    Streamlined identification rule logic to be more efficient.

  • PowerShell, Postfix, Meraki, SEPM, Sophos, Sonicwall, Cisco Meraki, Symantec Endpoint (Multiple IDs)

    Converted the use of multiple grok patterns per rule to use multi_grok for efficiency. Also, standardized gim_event_type_code mappings to align with detection categories and reclassified subtypes from alert to detection across multiple packs (e.g., Defender, Snort, Stormshield, Palo Alto, Fortigate, etc.).

  • Palo Alto (2824)

    Renamed spotlight title.

  • Schema (1940)

    Modified index templates to copy hash related fields (e.g., hash_md5, file_hash_) to associated_hash. This provides additional context to hash objects.

  • Palo Alto 11 (687)

    Updated colors for widgets that reference event_action to reflect schema.

  • AWS Security Lake (2314)

    Changed gim_event_category from alert to detection. The dashboard now supports both categories.

  • Bitdefender Telemetry (2950)

    Changed GIM codes for network events from 129999 (default) to 120200 (open) and 120300 (close).

  • Illuminate Core (3008)

    Disabled dynamic date detection for all Illuminate indices to fix mapping errors caused by inconsistent field formats.

  • Zeek (2618)

    Changed DNS request categorization to exclude NBSTAT.

  • Core (1711)

    Added support for MITRE ATT&CK Enterprise attacks_technique_uid & attacks_tactic_uid string values.

REMOVED / DEPRECATED Content

  • o365 (2957)

    Removed redundant type assignment in 22-o365_scc_categorize_alerts rule.

  • Bitdefender GravityZone (3058)

    Removed a possible leading forward slash for the source field (fixes issue when hostname is empty).

  • Compliance Content (2959)

    Removed deprecated ‘Compliance Content Spotlight (Deprecated)’ spotlight.

  • Palo Alto 9.1x (2716)

    DEPRECATED: The Palo Alto 9.1x Spotlight and associated processing content have been deprecated. Users should transition to the Palo Alto 11 Content Pack.

About Graylog
At Graylog, our vision is a secure digital world where organizations of all sizes can effectively guard against cyber threats. We’re committed to turning this vision into reality by providing Threat Detection & Response that sets the standard for excellence. Our cloud-native architecture delivers SIEM, API Security, and Enterprise Log Management solutions that are not just efficient and effective—whether hosted by us, on-premises, or in your cloud—but also deliver a fantastic Analyst Experience at the lowest total cost of ownership. We aim to equip security analysts with the best tools for the job, empowering every organization to stand resilient in the ever-evolving cybersecurity landscape.

About Version 2 Limited
Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

Action1 Named America’s Fastest-Growing Private Software Company on 2025 Inc. 5000 List

Action1, a leader in autonomous endpoint management (AEM), today announced it has been named the fastest-growing private software company in America, ranking #1 in its industry and #29 overall on the prestigious 2025 Inc. 5000 list. This first-time inclusion highlights the company’s hypergrowth and disruption of the traditional IT tools market.

“We are thrilled to be recognized as America’s fastest-growing private software company,” said Mike Walters, President and Co-founder of Action1. “This reflects the massive demand for cybersecurity innovation that is powerful, secure, and simple to deploy. Our growth is driven by an ambitious vision: to prevent all cyberattacks that exploit software vulnerabilities.”

Action1’s rapid growth, which outpaces SaaS and cybersecurity benchmarks, is fueled by its mission to make enterprise-grade security accessible to all. The company backs this by offering its fully functional, cloud-native platform free for the first 200 endpoints, supporting organizations of all sizes.
Mike Hofman, editor-in-chief of Inc., noted that this year’s honorees “didn’t just weather the storm—they grew through it,” praising their tenacity and clarity of vision amid economic challenges.
The full 2025 Inc. 5000 list can be found at www.inc.com/inc5000.

About Action1

Action1 is an autonomous endpoint management platform trusted by many Fortune 500 companies. Cloud-native, infinitely scalable, highly secure, and configurable in 5 minutes—it just works and is always free for the first 200 endpoints, with no functional limits. By pioneering autonomous OS and third-party patching with peer-to-peer patch distribution and real-time vulnerability assessment without needing a VPN, it eliminates routine labor, preempts ransomware and security risks, and protects the digital employee experience.

In 2025, Action1 was recognized by Inc. 5000 as the fastest-growing private software company in America. The company is founder-led by Alex Vovk and Mike Walters, American entrepreneurs who previously founded Netwrix, a multi-billion-dollar cybersecurity company.

About Version 2 Limited
Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

Action1 Launches MSP Partner Program Offering Premium Support, Exclusive Pricing, and New Revenue Streams

Action1, a leader in autonomous endpoint management (AEM), today launched its new MSP Partner Program. The program is specifically designed to equip Managed Service Providers (MSPs) with the tools necessary to deliver high-margin, recurring patch management services and gain a competitive edge, especially when servicing SMBs and mid-market clients who often lack dedicated in-house IT resources.

“We designed this program to give MSPs a competitive advantage that directly boosts their bottom line. We are committed to helping them deliver patch management that is far beyond what traditional RMM tools can achieve, allowing them to deepen their value as trusted advisors.”
— Branden Boag, VP of Sales & Alliances at Action1
 

Key Program Benefits for MSPs

The Action1 MSP Partner Program focuses on enhancing partner profitability, efficiency, and service quality:

  • Advantage Pricing: Exclusive, lower pricing compared to non-partners, which directly contributes to higher profit margins.
  • Premium Support: Access to a dedicated customer success manager and premium technical support for faster remediation of critical issues.
  • New Revenue Opportunities: Resale and referral options for serving larger organizations outside their traditional managed services base.
  • Superior Patching: A more comprehensive and effective patch management solution than traditional RMM tools, ensuring significantly higher endpoint compliance and security.
  • Co-Marketing & Certification: Access to co-marketing resources and financial incentives for technician certification to help validate expertise and drive leads.
“Working with Action1 gives us fast, automated patching across all client environments—no infrastructure, no hassle. It allows us to deliver high-value, scalable services that enhance security and drive recurring revenue.”
— Tunde Odeleye, Principal Security Architect & CISO at Data Center Warehouse

The Action1 MSP Partner Program is now open to qualified Managed Service Providers globally, with a primary focus on the US market, ready to help partners expand their managed security services portfolio.

The Action1 MSP Partner Program is now open to qualified MSPs globally, with a primary focus on the US market.

About Action1

Action1 is an autonomous endpoint management platform trusted by many Fortune 500 companies. Cloud-native, infinitely scalable, highly secure, and configurable in 5 minutes—it just works and is always free for the first 200 endpoints, with no functional limits. By pioneering autonomous OS and third-party patching with peer-to-peer patch distribution and real-time vulnerability assessment without needing a VPN, it eliminates routine labor, preempts ransomware and security risks, and protects the digital employee experience.

In 2025, Action1 was recognized by Inc. 5000 as the fastest-growing private software company in America. The company is founder-led by Alex Vovk and Mike Walters, American entrepreneurs who previously founded Netwrix, a multi-billion-dollar cybersecurity company.

About Version 2 Limited
Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.