Neha Singh, Author at SecureW2

Neha Singh

561 articles published

28 topics covered

About

Neha Singh is a CISSP, with 13 years of experience, specializing in PKI, RADIUS, and 802.1X frameworks. She is skilled at translating real-world customer challenges into practical scalable solutions. Neha drives adoption of complex security solutions through clear, cross-functional collaboration with Product, Engineering, and Sales. Combines her deep product management experience with a research-driven mindset to build customer trust. She holds multiple industry certifications and serves on the Board of Directors for the ISC2 Chennai Chapter.

Cited by

Articles by

Neha

Learn how to secure AI agents and MCP servers with identity-first security.

Thought Leadership August 17, 2026

MCP: New Technology, Old Security Mistakes

The ongoing shift from static large language models to Agentic AI is fundamentally rewriting the enterprise playbook. Whether through Assisted AI agents, human-in-the-loop sidecars for coding or sales workflows, or...

Every PKI for AI agents guide says to use X.509 certificates; almost none explain how an agent actually gets one.

PKI/Certificates August 15, 2026

PKI for AI Agents: How ACME and SCEP Actually Issue Certificates

AI agents are accumulating credentials faster than most security teams can track them. API keys get embedded in configuration files. OAuth tokens get reused across agent instances. Static secrets get...

Most access control failures come down to getting one of two security checks wrong. Here's how authentication and authorization differ.

Protocols & Standards August 12, 2026

AuthN vs. AuthZ: What’s the Difference?

Every time a user connects to a Wi-Fi network, opens a cloud application, or logs into a virtual private network (VPN), two security checks happen in sequence. The first verifies...

Every authentication decision your network makes starts with one question: who or what is actually on the other end of this connection? Digital identity is the answer.

PKI/Certificates August 10, 2026

What Is Digital Identity? A Complete Guide

Every system that grants access — a Wi-Fi network, a VPN, a cloud application — makes the same decision thousands of times a day: is this connection who it claims...

A technical guide explaining how FIPS mode restricts cryptographic operations to government-validated algorithms and when organizations must enable it.

Protocols & Standards August 4, 2026

FIPS Mode: What It Is, Why It Matters, and How to Enable It

Most IT administrators encounter Federal Information Processing Standard (FIPS) compliance as a line item in a government contract or an audit finding. Knowing what FIPS mode actually does, and what...

A technical guide to how packet sniffing captures network traffic, the attacks built on top of it, and how certificate-based authentication closes the gap sniffers rely on

Risks & Threats August 2, 2026

What Is Packet Sniffing? How It Works, Risks, and Defense

Anyone with the right software and access to a network segment can capture the traffic moving across it. On an unencrypted or misconfigured network, that traffic can include login credentials,...

Kerberoasting lets an attacker with basic domain user access request crackable Kerberos tickets for service accounts, then break the encryption offline to recover plaintext passwords.

Risks & Threats July 31, 2026

What Is Kerberoasting? Attack Steps, Detection & Defense

Active Directory service accounts run the applications, databases, and scheduled tasks that keep a network running. Many of those accounts were created years ago, never rotate their passwords, and hold...

A single unauthorized Wi-Fi device can hand attackers a direct line into your network, bypassing every firewall rule you’ve written.

Risks & Threats July 23, 2026

Rogue Access Point Attacks: How They Work and How to Stop Them

Every access point on your network is a potential front door. Most of them are points that IT installed and secured on purpose. A rogue access point is one nobody...

A breakdown of MFA fatigue attacks and how phishing-resistant logins prevent them.

Risks & Threats July 11, 2026

What Is MFA Fatigue and How Do Attackers Exploit It?

A stolen password isn’t always enough to get into an account protected by multi-factor authentication (MFA). So, attackers found a workaround: bombard the victim’s phone with authentication requests until they...