Better business through smarter cybersecurity

Better business through smarter cybersecurity

All Posts

Cybersecurity News: ServiceNow acquires cybersecurity startup Armis, MacSync Stealer adopts quieter installation, Nissan customer data stolen in Red Hat raid

In today’s cybersecurity news… ServiceNow to acquire cybersecurity startup Armis ServiceNow agreed to acquire cybersecurity company Armis for $7.75 billion, marking the largest acquisition in…

What We Covered on Cyber Security Headlines in 2025

In 2025, we’ll have featured over 2,000 stories on Cyber Security Headlines, covering everything from zero-days to policy changes to breach notifications. When we looked…

Cybersecurity News: Spotify music library scraped, DDoS disrupts French postal services, Fake delivery sites hit holiday shoppers

In today’s cybersecurity news… Spotify music library scraped A pirate activist group called Anna’s Archive scraped Spotify’s music library, collecting 256 million rows of track…

The Department of Know: President signs defense bill, time flies at NIST, Italian ferry malware

This week’s Department of Know is hosted by Rich Stroffolino with guests Jason Taule, CISO, Luminis Health, and Chris Ray, Field CTO, GigaOm Missed the…

Cybersecurity News: President’s cyber bill, Iranian APT resurfaces, Kimwolf DDoS attack

In today’s cybersecurity news… President signs defense bill funding Cyber Command, Pentagon phone security The $901 billion Pentagon policy bill, named the 2026 National Defense…

Cybersecurity News: Windows RemoteApp problems, ferry malware arrest, Senator’s open-source warning

In today’s cybersecurity news… Recent Windows updates break RemoteApp connections Yesterday we reported on Microsoft’s December 2025 security update breaking Message Queuing (MSMQ) on older…

How Should CISOs Talk to the Business

Most CISOs can talk tech inside and out. But when they have to communicate that to the business, the conversation doesn’t flow nearly as smoothly.…

Cybersecurity News: FTC orders crypto to pay, New exploit of React2Shell, Ukraine fraud ring take down

FTC orders crypto company to pay The Federal Trade Commission (FTC) says crypto bridge operator Nomad must repay users for funds lost in a 2022…

Register for “Hacking SOC Workflow” – Super Cyber Friday [01-09-26]

Please join us on Friday January 9, 2026 for Super Cyber Friday. REGISTER for 1-9-26 Super Cyber Friday Our topic of discussion will be “Hacking…

Cybersecurity News: Rogue NuGet package steals data, Venezuela’s PDVSA suffers attack, patched Fortinet flaws exploited

In today’s cybersecurity news… Rogue NuGet package steals data Researchers from Socket Security have uncovered a malicious NuGet package that impersonates the popular .NET library…

How Much Risk Would a CISO Risk if a CISO Could Risk Risk? (LIVE in Boca Raton, FL)

CISOs first appeared in the C-Suite over thirty years ago. But their responsibilities and function within an organization still vary wildly. Organizations need to understand…

Cybersecurity News: US taps private firms in cyber offensive, Microsoft updates cause queuing failures, phishing campaign delivers Phantom Stealer

In today’s cybersecurity news… US turns to private firms in cyber offensive Late last week, Bloomberg’s sources said the US administration is preparing a new…

The Department of Know: MITRE’s weaknesses list, DoD goes postquantum, Coupang fallout

This week’s Department of Know is hosted by Rich Stroffolino with guests Andy Ellis, Principal, Duha, and Johna Till Johnson, CEO and Founder, Nemertes Research…

Cybersecurity News: MongoDB records exposed, Apple WebKit patches, Coupang culprit identified

In today’s cybersecurity news… 16TB MongoDB database exposes nearly 4.3 billion professional records The data, discovered by researchers at nexos.ai, was discovered on November 23,…

Reddit AMA – “I’m a security professional who transitioned our security program from compliance-driven to risk-based. Ask Me Anything.”

Our monthly AMA on r/cybersecurity on Reddit has begun! Our topic is “I’m a security professional who transitioned our security program from compliance-driven to risk-based. Ask Me…

Cybersecurity News: ‘DroidLock’ demands ransom, Google fixes secret Chrome 0-day, UK fines LastPass over 2022 breach

In today’s cybersecurity news… ‘DroidLock’ malware demands ransom Researchers at Zimperium say a new Android strain called DroidLock is hitting Spanish-speaking users through phishing sites…

How Much Cyber Risk Should a CISO Own?

CISOs don’t own cyber risk. Until they do. Haven’t we moved beyond the CISO being the scapegoat in waiting? Check out this post by Nick…

Cybersecurity News: Coupang CEO resigns, hactivists target US infrastructure, Israeli cybersecurity hits record funding

In today’s cybersecurity news… CEO of retail giant Coupang resigns South Korea’s Coupang CEO Park Dae-jun stepped down after a breach exposed data from around…

What CISOs Want You To Know About Insider Threats

Insider threats aren’t just headline-grabbing sabotage stories. They’re often subtle, slow-moving, and deeply human. Whether it’s negligence, burnout, or espionage, insider risk sits at the…

Cybersecurity News: Spain arrest over data records, goodbye dark Telegram, scammers poison AI search

In today’s cybersecurity news… Spain arrest over data records Spanish authorities arrested a 19-year-old in Barcelona for allegedly stealing 64 million personal records from nine…

I’m Worried That We’re Not Worried About the Right Worries With AI

When we’re looking to secure LLMs, the security considerations can be overwhelming. But often the things that make the most headlines only matter to those…

Cybersecurity News: Ransomware costs billions, cybercrime leads to real violence, three arrested for hacking tools

Ransomware payments pass $4.5 billion Ransomware payments reported to the U.S. Treasury’ s Financial Crimes Enforcement Network (FinCEN) has now topped $4.5 billion USD, with…

The Department of Know: CISO hiring warning, critical threat actor law, Microsoft Defender outage

This week’s Department of Know is hosted by Sarah Lane with guests Jason Shockey, CISO, Cenlar FSB, and Mike Lockhart, CISO, Eagleview Missed the live…

What We Learned in 2025: The Top 3 Things CISOs Want to Know from Vendors

This year, we launched Security You Should Know. A podcast that puts CISOs and vendors in a real conversation, without the sales funnel, without the…