PKI Insights Recap – Overcoming HSM Challenges with Visibility
In our March PKI Insights webinar, we tackled one of the most overlooked risks in PKI environments: the lack of visibility into hardware security modules (HSMs). While HSMs are essential for secure key storage and compliance, they’re often deployed and forgotten—rarely monitored, rarely maintained, and frequently misunderstood. This “black box” treatment can lead to unexpected […]
PKI Spotlight Unveils Industry-First Multi-Vendor HSM Monitoring Support
PKI Insights Recap – Strengthening Security in Banking & Finance with PKI
Financial institutions rely on trust, security, and compliance to protect transactions, customer data, and business operations. However, a growing number of organizations are unaware of how new regulations will impact them. During our February PKI Insights webinar, we conducted a poll and found that 75% of attendees had never heard of DORA (Digital Operational Resilience […]
Preparing for Microsoft’s Strong Certificate Mapping Enforcement – What You Need to Know
Microsoft’s recent update, released on February 11, 2025, significantly changed certificate-based authentication by introducing Strong Certificate Mapping. This update is designed to reduce the risk of credential escalation by enforcing stricter mapping requirements for certificates used in authentication. Ensuring compliance in organizations that rely on certificate-based authentication is necessary and vital for preventing authentication failures and costly […]
Comparing PKI Spotlight vs. CLM and Security Tools for PKI Monitoring and Management
Update Feb 21, 2025: This blog post has been updated to include Certificate Lifecycle Management (CLM) tools such as Venafi, KeyFactor, and AppViewX, as well as Rapid7 in the comparison. The expanded coverage provides a more comprehensive look at how different solutions interact with PKI and their monitoring capabilities. Introduction Public Key Infrastructure (PKI) is […]
Don’t Believe the FUD – Microsoft PKI is Your Key to Crypto Agility
It’s that time again—the point in the tech cycle where vendors exploit uncertainty to spread Fear, Uncertainty, and Doubt (FUD) in cybersecurity. What’s the latest FUD in PKI? The same old misinformation: that Microsoft Active Directory Certificate Services (ADCS) is going away. If you’ve encountered a PKI vendor claiming, “Microsoft is discontinuing ADCS, so you […]
PKI Insights Recap – Emerging PKI Threats for 2025
As we step into 2025, the cybersecurity landscape continues to evolve, with Public Key Infrastructure (PKI) at the center of many critical challenges. During our January PKI Insights webinar, we had the opportunity to discuss some of the most pressing PKI threats for the year ahead and offer actionable strategies to address them. Here are […]
When you know, you Know – Catching HSM failures before they cost your organization!
One of the most extraordinary things about working in a new Cybersecurity space like PKI Spotlight is seeing your technology stack solve real-world problems. From our decades of experience designing, deploying, and supporting complex enterprise PKIs, we have seen that many minor issues have a significant impact on organizations. Often, these minor issues would […]