Better business through smarter cybersecurity

Better business through smarter cybersecurity

All Posts

I’ll Show You Our Resilience Plan Once Our Cloud Storage Is Back Online

Every CISO will tell you that resilience is the goal of any security program. But how can we be resilient when every organizations is beholden…

Cybersecurity News: Microsoft patches Office zero-day vulnerability, Blackmoon targets Indian users, Konni targets blockchain developers

In today’s cybersecurity news… Microsoft patches Office zero-day vulnerability Microsoft pushed an emergency out-of-band patch for a high-severity Office zero-day that attackers are actively exploiting.…

Join Us 2-6-26 for “Hacking Analyst Happiness” – Super Cyber Friday

Please join us on Friday February 6, 2026 for Super Cyber Friday. Our topic of discussion will be “Hacking Analyst Happiness: An hour of critical…

Reddit AMA – “I had my budget cut and still reduced risk. Ask Me Anything”

Our monthly AMA on r/cybersecurity on Reddit has begun! Our topic is “I had my budget cut and still reduced risk. Ask Me Anything.” For this edition,…

What’s the toughest part about cybersecurity marketing?

At Cyber Marketing Con 2025 in Austin, TX, David Spark posed a question to the industry: “What’s the toughest part about being a cybersecurity marketer?”…

Unifying Detection and Response with Athena Security

Security teams face two persistent challenges: alert fatigue and security product fragmentation. Organizations generate endless streams of alerts from dozens of disconnected tools, creating an…

The Department of Know: Davos worries, UK-China tensions, calendar concerns

This week’s Department of Know is hosted by Rich Stroffolino with guests Krista Arndt, associate CISO, St. Luke’s University Health Network, and Jason Shockey, CISO,…

Cybersecurity News: Microsoft Patch problems, Sandworm hits Poland, Dresden Museum cyberattack

In today’s cybersecurity news… Microsoft releases emergency update for frozen Outlook The out-of-band release occurred Saturday for Windows 10, Windows 11, and Windows Server. This…

Cybersecurity News: Multi-stage SharePoint attack, SmarterMail bypass flaw, AI worries Davos

In today’s cybersecurity news… Multi‑stage AiTM phishing and BEC campaign abusing SharePoint Researchers at Microsoft Defender have “uncovered a multi‑stage campaign targeting multiple organizations in…

How Best to Prepare Your Data for Your Tools

You can put practically anything into an LLM and the output will look acceptable if not fantastic. Unlike most things in technology, beautiful results with…

Cybersecurity News: Tesla hacked at Pwn2Own Automotive, Everest sitting on Under Armour data? PurpleBravo fake jobs campaign targets IP addresses

In today’s cybersecurity news… Tesla hacked at Pwn2Own Automotive Security researchers at Pwn2Own Automotive 2026 demonstrated 37 zero-day exploits across EV chargers and infotainment systems,…

When Checklists Aren’t Enough: Moving Beyond Compliance Theater

In last month’s CISO Series AMA on r/cybersecurity, we asked security leaders who’ve made the shift from compliance-driven to risk-based programs to share what actually…

Cybersecurity News: UK-China forum, Iranian TV hijacked, VoidLink made by AI

In today’s cybersecurity news… UK and China try to ease cyberattack tensions Bloomberg’s sources say the UK and Chinese governments created a forum called Cyber…

Come see CISO Series Podcast at Convene in Clearwater, FL 3-3-26

We’re returning for the fourth time to record a live CISO Series Podcast at Convene conference in Clearwater, Florida! For such a momentous occasion, we…

AI Is Very Efficient at Making Us Forget the Value of Humans

When the glut of LLM-based tools started cropping up, many assumed they could never approximate the human creativity needed to be effective red teamers by…

Cybersecurity News: Gemini prompt injection flaw exposes calendar info, hacker admits to Supreme Court data leak, researchers uncover PDFSIDER malware

In today’s cybersecurity news… Gemini prompt injection flaw exposes calendar info Miggo Security found a prompt injection issue in Google Gemini that lets attackers hide…

The Department of Know: Easterly helms RSAC, Third party apps report, Self-poisoning AI

This week’s Department of Know is hosted by Sarah Lane with guests Dmitriy Sokolovskiy, senior vice president, information security, Semrush, and Nick Espinosa, host, The…

Cybersecurity News: NSA dual-hat question, third-party report, GhostPoster extension continues

In today’s cybersecurity news… Cybercom-NSA leadership nominee to assess dual-hat role Army Lt. Gen. Joshua Rudd, the presidential nominee for Director of the National Security…

Cybersecurity News: Easterly helms RSAC, Windows update problems, Police Copilot gaffe

In today’s cybersecurity news… Jen Easterly to helm RSAC The RSA Conference, host of the world’s largest and most influential cybersecurity conference, announced yesterday that…

Experience the CISO Series Podcast at Convene in Clearwater, FL 3-3-26

You’ve listened to the CISO Series Podcast for years but if you’ve never joined us for a live show, you haven’t gotten the full experience.…

Don’t Try to Win with Technical Expertise. Win by Partnering.

In security leadership, being right on a technical level only goes so far. How can we shift our mindset to embrace building consensus rather than…

Cybersecurity News: U.S. weighs cyberwarfare options, DeadLock uses smart contracts to hide work, China says stop using US & Israeli cybersecurity software

In today’s cybersecurity news… U.S. weighs private companies’ cyberwarfare roles The US administration is considering a policy shift that would let private companies play a…

Join Us 1-30-26 for “Hacking Employee Retention” – Super Cyber Friday

Please join us on Friday January 30, 2026 for Super Cyber Friday. Our topic of discussion will be “Hacking Employee Retention: An hour of critical…

Cybersecurity News: GoBruteforcer targets blockchain projects, Android accessibility issue just a bug, Verizon stops automatic phone unlocks

In today’s cybersecurity news… GoBruteforcer targets crypto, blockchain projects Check Point reports an updated GoBruteforcer botnet is targeting crypto and blockchain projects by compromising internet-exposed…