Amanda Tucker, Author at SecureW2

Amanda Tucker

62 articles published

14 topics covered

About

Amanda Tucker covers network security at SecureW2, where she has spent 5 years writing about PKI, RADIUS authentication, 802.1X, continuous trust, and device onboarding. She translates complex certificate and authentication concepts into practical guidance for IT and security teams. Amanda brings 7 years of professional writing experience and a background in research and analysis.

Cited by

Articles by

Amanda

Microsoft's October 2026 update blocks saved-logon single sign-on for PEAP-MSCHAPv2 Wi-Fi, wired and VPN connections. See how to confirm it with event ID 4025, what the temporary BlockNtlmv1SSO setting does, and how JoinNow Dynamic PKI and JoinNow Cloud RADIUS move Windows devices to EAP-TLS.

Wi-Fi & Wired Security October 28, 2026

KB5127648: Why PEAP-MSCHAPv2 Wi-Fi SSO Fails on Windows 11

KB5127648 blocks PEAP-MSCHAPv2 single sign-on on Windows 11 devices without Credential Guard. Learn the symptoms, Microsoft's temporary registry setting, and how JoinNow Dynamic PKI and JoinNow Cloud RADIUS replace passwords...

Deleting an agent from a console ends its presence, but the credentials it held can keep working.

Risks & Threats October 20, 2026

Removal Is Not Revocation: How to Revoke AI Agent Access

When teams delete an AI agent from a console, they assume that its access is automatically gone too. However, the agent’s tokens, API keys, certificates and cloud role bindings remain...

An autonomous AI agent that acts without approval will eventually act on bad instructions, so plan for containment, not just prevention.

Risks & Threats October 18, 2026

Autonomous AI Agent Security: Threats and Controls That Work

Autonomous agents execute multistep tasks using real tools and valid credentials. Most guidance focuses on prompts, ignoring the risks associated with execution boundaries. This article covers the main threats to...

An autonomous agent holding an OAuth token can act on everything that token allows, so the token is the real security boundary.

Protocols & Standards October 14, 2026

What Is an OAuth Token? How to Use It to Secure Autonomous Agents

AI agents now call APIs, read mail, and open tickets on their own. Almost all of this access runs on an OAuth token. This credential grants permission to reach protected...

Static credentials let anyone who copies them walk in. Here's how to verify AI agents before MCP tokens are issued.

ZTNA & VPN October 9, 2026

A Token Is Only as Good as the Check Before It Was Issued

An AI agent can have a valid token without proving it is the agent you intended to authorize. The problem starts with how the agent gets the token. If it...

Fifteen G2 badges span four categories in the Fall 2026 reports

SecureW2 Tech September 25, 2026

SecureW2 Reviews 2026: 15 G2 Badges Won in the Fall 2026 Reports

How well does SecureW2 deliver on the needs of IT security teams in 2026? The answer lies in the G2 badges earned and customer reviews. SecureW2 received 15 badges in...

A single stolen Kerberos ticket can compromise trust across an entire Active Directory (AD) domain — an attack path that password-focused defenses completely miss.

Risks & Threats September 23, 2026

What Is a Pass-the-Ticket Attack? Kerberos Ticket Theft Explained

Pass-the-ticket attacks bypass most traditional, credential-based defenses because they don’t rely on stolen passwords. Instead, the attacker uses a Kerberos ticket taken directly from a compromised machine’s memory. With this...

With CDP, an unauthenticated switch port can give attackers access to your network inventory before they run a single exploit.

Risks & Threats September 22, 2026

What Is a CDP Attack? How Cisco Discovery Protocol Gets Exploited

When you plug an unmanaged laptop into an open network jack, Cisco Discovery Protocol (CDP) helps determine what it is connected to. It doesn’t require a login, credentials, or even...

A client needed to enroll and secure headless Linux kiosks automatically. A custom solution shows how best to do it.

PKI/Certificates September 22, 2026

Best Practices for IoT Device TPM Attestation: Lessons From a Custom Linux Deployment

The increasing prevalence of Internet of Things (IoT) devices means some enterprise networks may have hundreds or even thousands of headless devices connected at any given time. Their sheer number...