Better business through smarter cybersecurity

Better business through smarter cybersecurity

All Posts

Cybersecurity News: Palo Alto VPN attacks, NATO cyberdefense exercise, Chinese exploit React2Shell

In today’s cybersecurity news… New wave of VPN login attempts on Palo Alto portals This new campaign started on December 2nd and originated from more…

Cybersecurity News: Predator spyware, Russia blocks FaceTime, US cyber strategy coming

In today’s cybersecurity news… Predator spyware spotted across several countries Recorded Future’s Insikt Group reports that while US sanctions against Intellexa’s Predator spyware have seemingly…

How To Tell When a Vendor is Selling AI Snake Oil

Why do so many of the advocates for AI in cybersecurity know so little about how AI actually works? Questions just one layer deep are…

Cybersecurity News: Record-breaking DDoS attack, React bug puts servers at risk, RansomHouse attack

Record-breaking DDoS attack Aisuru just broke the DDoS record again, firing off a massive 29.7-terabit-per-second attack that Cloudflare had to absorb. This botnet is basically…

Cybersecurity News: Microsoft Defender outage disrupts threats, Apple resists India’s app order, MuddyWater strikes Israel

In today’s cybersecurity news… Microsoft Defender outage disrupts threats Microsoft Defender for Endpoint experienced a 10-hour portal outage affecting XDR features, including advanced threat-hunting alerts…

You Can’t Fall Behind in AI if You Never Start

No organization wants to fall behind on using AI. But securing it remains a challenge. The tools are so new that everyone seems to be…

Cybersecurity News: India orders web safety app, arrests over IP camera snooping, Albiriox shows up on dark web

In today’s cybersecurity news… India orders web safety app The Indian government has ordered smartphone makers to pre-install its state-owned cybersecurity app, Sanchar Saathi, on…

The Department of Know: Prompt injection problems, California browser law, Hacklore’s security myths

This week’s Department of Know is hosted by Rich Stroffolino with guests Mathew Biby, director, cybersecurity, TixTrack, and Derek Fisher, Director of the Cyber Defense…

Verifying Identity with Incode Technologies

Traditional identity systems weren’t built to handle AI-powered fraud. Criminals have become the most successful adopters of digital transformation, deploying deep fakes, voice cloning, and…

Cybersecurity News: Asahi ransomware details, California browser law, Windows Teams accelerated

In today’s cybersecurity news… CISA Adds actively exploited XSS Bug to KEV CISA has added a security flaw that impacts OpenPLC ScadaBR to its Known…

Cybersecurity News: Microsoft blocks Entra, AI scammer legislation, ASUS patches AiCloud

In today’s cybersecurity news… Microsoft to block unauthorized scripts in Entra ID logins with 2026 CSP update Microsoft plans to strengthen Entra ID security by…

Cybersecurity News: AWS botnet smacks 28 countries, LLMs help malware authors evade detection, Anthropic pressed over Claude espionage

In today’s cybersecurity news… AWS outage botnet smacks 28 countries A Mirai-based botnet called ShadowV2 surfaced during October’s major AWS outage, exploiting vulnerabilities in IoT…

Cybersecurity News: CISA warns of app break-ins, StealC V2 spread through blender files, Russian entrepreneur arrested

In today’s cybersecurity news… CISA warns of app break-ins CISA says state-backed hackers and cyber-mercenaries are breaking into Signal and WhatsApp accounts using spoofed apps,…

Join Us 12-12-25 for “Hacking AI Workflows” – Super Cyber Friday

Please join us on Friday December 12, 2025 for Super Cyber Friday. Our topic of discussion will be “Hacking AI Workflows: An hour of critical…

Why Architect for Human Error When We Can Make People Feel Really Bad About It?

We keep hearing that humans are the weak link in a security program. If that’s the case, why do we keep putting so much strain…

Cybersecurity News: CISA orders OIM patches, Delta Dental incurs breach, Ukraine postal operator systems down

In today’s cybersecurity news… CISA orders feds to patch OIM CISA ordered federal agencies to patch a critical Oracle Identity Manager zero-day by December 12th,…

The Department of Know: Overconfidence new zero-day, FCC torches Salt Typhoon rules, AI uninsurable

This week’s Department of Know is hosted by Rich Stroffolino with guests Keith Townsend, Keith Townsend, host CTO Advisor Podcast, founder of The Advisor Bench,…

Cybersecurity News: CrowdStrike insider catch, Spanish airline breach, AI not insurable

In today’s cybersecurity news… CrowdStrike catches insider feeding information to hackers CrowdStrike has now confirmed that “an insider shared screenshots taken on internal systems. CrowdStrike…

Cybersecurity News: Sturnus captures encrypted chats, PowerSchool schools blamed, SEC security bill

In today’s cybersecurity news… Sturnus Android Trojan captures encrypted chats and hijacks devices Cybersecurity researchers at the Dutch mobile security company ThreatFabric are warning of…

In the Age of Identity, is Network Security Dead?

Network security used to be the name of the game. But many see asset management and identity as the new perimeters. Does this mean network…

Cybersecurity News: Cloudflare blames database, Crypto heist takedown, WhatsApp flaw exposed billions

Cloudflare blames database  Cloudflare’s worst outage since 2019 knocked major websites offline for hours on Tuesday, and the company now says it wasn’t a cyberattack…

Join Us 12-5-25 for “Hacking AI Data Readiness” – Super Cyber Friday

Please join us on Friday December 5, 2025 for Super Cyber Friday. Our topic of discussion will be “Hacking AI Data Readiness: An hour of…

Cybersecurity News: FCC to torch Salt Typhoon rules, group claims Danish party website hits, MI5 warns of LinkedIn Chinese spies

In today’s cybersecurity news… FCC to torch rules from Salt Typhoon The FCC is set to vote on scrapping former cybersecurity rules imposed after the…

Are You Implying This Line Graph Isn’t a Compelling Cybersecurity Narrative?

Just because metrics are derived from cold hard facts doesn’t mean we should present them as such. If CISOs don’t frame their metrics to tell…