Better business through smarter cybersecurity

Better business through smarter cybersecurity

All Posts

Cybersecurity News: Azure hit by DDoS, Kenyan government sites recover, EVALUSION emerges

In today’s cybersecurity news… Azure hit by DDoS using 500K IPs Microsoft reported that its Azure network was hit by a 15.72 Tbps DDoS attack…

What’s the Cybersecurity Equivalent of Leaving Your Front Door Wide Open?

At HOU.SEC.CON 2025, David Spark asked a simple question. “What’s the cybersecurity equivalent of leaving your front door wide open?” The answers came quickly. Easy-to-crack…

Securing Application Delivery with Island

The complexity of securing applications is staggering: users accessing applications from everywhere, multiple layers of security stacked on top of each other, speed and performance…

The Department of Know: Autonomous AI cyberattack, CISOs back to work, bus kill switches

This week’s Department of Know is hosted by Rich Stroffolino with guests Robb Dunewood, Host, Daily Tech News Show, and Howard Holton, CEO, GigaOm Missed…

Cybersecurity News: Windows 10 update failure, autonomous AI cyberattack, Feds fumble Cisco patches

In today’s cybersecurity news… Microsoft warns of potential Windows 10 update failure The company has confirmed it is investigating an issue in which a bug…

Reddit ‘Ask Me Anything’ – November 2025

Our monthly AMA on r/cybersecurity on Reddit has begun! Our topic is “I’m a CISO who has experience dealing with an “insider threat.” Ask Me Anything.” For…

Cybersecurity News: Cyber laws reprieved, Microsoft screen capture, FBI highlights Akira

In today’s cybersecurity news… Two key cyber laws are back as president signs bill to end shutdown On Wednesday, the President signed a government funding…

How to Manage Configuration Drift

On the onset, no one purposefully misconfigures a tool. But over time, it happens. Configuration drift inevitably results in security issues. How are we managing…

Cybersecurity News: Mobile blackout for Russian travelers, Windows 11 supports 3rd party passkeys, Synology patches BeeStation flaw

In today’s cybersecurity news… Mobile blackout for Russian travelers Russia started imposing 24-hour mobile internet blackouts for citizens returning from abroad, as a security measure…

What CISOs Want You To Know During M&A

Mergers and acquisitions are more than business transactions. They’re trust transfers, cultural collisions, and risk amplifiers. When security leaders step into an M&A scenario, they’re…

Cybersecurity News: Google’s remote-wipe weapon, Qilin ransomware activity surges, GootLoader is back

In today’s cybersecurity news… Google’s Find Hub turns into remote-wipe weapon Researchers at South Korea’s cybersecurity firm Genians say North Korean hacking group KONNI used…

Our CISO Certainly Puts the Tool in Multi-Tool (Live from LA)

CISOs never come into the role as experts in everything. But when the get the job, there’s the temptation to try to become a Swiss…

Cybersecurity News: Reauthorizing CISA, Electric bus kill switches, GDPR for AI

In today’s cybersecurity news… CISA reauthorization  One of the impacts of the prolonged US government shutdown was the expiration of the 2015 Cybersecurity Information Sharing…

The Department of Know: cybercriminals join forces, SleepyDuck” exploits Ethereum, passwords still awful

This week’s Department of Know is hosted by Rich Stroffolino with guests Jacob Coombs, CISO, Tandem Diabetes Care, and Ross Young, Co-host, CISO Tradecraft, and…

Cybersecurity News: runC Docker threats, lost iPhone scam, Landfall spyware warning

In today’s cybersecurity news… runC flaws could allow hackers to escape Docker containers There are actually three new vulnerabilities disclosed by Aleksa Saraiin, a software…

Cybersecurity News: Hackers use Hyper-V, Cisco UCCX flaw, The Louvre’s password

In today’s cybersecurity news… Hackers use Windows Hyper-V to evade EDR detection According to a new report from Bitdefender, a threat actor group known as…

Is Least Privilege Dead?

The idea of least privilege has become accepted wisdom in cybersecurity. Despite being around for decades, everyone still seems to be struggling with it. So…

Cybersecurity News: Google uncovers PROMPFLUX, CISA warns of CentOS Web Panel bug, Threat group targets academics

In today’s cybersecurity news… Google uncovers PROMPTFLUX malware Google says it identified an experimental malware called PROMPTFLUX that uses Gemini to continuously rewrite its own…

DEMO: Enterprise Access Management with Imprivata

Passwords remain a bottleneck to security and productivity — especially on shared workstations. How can organizations reduce friction without compromising access control? In this demo,…

Join Us 11-21-25 for “Hacking the Budget Battle” – Super Cyber Friday

Please join us on Friday, November 21, 2025, for Super Cyber Friday. Our topic of discussion will be “Hacking the Budget Battle: An hour of critical…

Cybersecurity News: Scattered Spider, LAPSUS$, ShinyHunters team up, Nikkei breach impacts 17k, React Native flaw prompts attacks

In today’s cybersecurity news… Scattered Spider, LAPSUS$, and ShinyHunters join forces Trustwave SpiderLabs said in a report shared with The Hacker News that three major…

I Don’t Just Guess About Effectiveness, I Make Educated Guesses!

In cybersecurity, we know what controls work well. Think of MFA. But beyond the basics, it’s often hard to tell what is actually effective. If…

Cybersecurity News: “SleepyDuck” uses Ethereum, SesameOp abuses OpenAI API, cybercrooks steal physical cargo

In today’s cybersecurity news… “SleepyDuck” uses Ethereum to keep command server alive Threat intelligence firm Secure Annex found a malicious Visual Studio extension called “SleepyDuck”…

Optimizing Access Management with Imprivata

Access management has become one of the most persistent friction points in modern organizations. The challenge isn’t just about securing identities. It’s about doing so…