Better business through smarter cybersecurity

Better business through smarter cybersecurity

All Posts

DEMO: Controlling Device and File Access With ThreatLocker Storage Control

Storage devices remain a key vector for data loss and malware. How can organizations gain visibility and enforce granular control over what gets read, written,…

Exploring Storage Control with ThreatLocker

User-based access controls are inadequate. Attackers know that users inherit their full permissions. When ransomware executes under a user’s account, its game over. Traditional role-based…

Cybersecurity News: European airport cyberattack, SMS celltower scam, GPT4-powered ransomware

In today’s cybersecurity news… European airport disruption due to cyberattack check-in and baggage software Disruptions and delays continue at several major airports including London’s Heathrow,…

Reddit ‘Ask Me Anything’ – September 2025

Our monthly AMA on r/cybersecurity on Reddit has begun! Our topic is “I’m a security professional who had to clean up a mess. Ask Me Anything.” For…

Cyber Security Headlines Week in Review: Student hackers increase, CISA wants CVE, Microsoft called hypocritical

This week’s Cyber Security Headlines – Week in Review is hosted by Rich Stroffolino with guests Jack Kufahl, CISO, Michigan Medicine, and Nick Espinosa, host,…

Cybersecurity News: Google patches zero-day, Copilot’s forced installation, Scattered Spider arrests

In today’s cybersecurity news… Google patches sixth Chrome zero-day exploited in attacks this year Emergency security updates were released to patch this sixth one, which…

What New Risks Does AI Introduce?

Just when we haven’t solved the proliferation of Shadow IT, we’re now dealing with Shadow AI. While much is the same, the “newness” is the…

Cybersecurity News: Insight Partners warns thousands, Scattered Spider feigns retirement, Consumer Reports calls Microsoft ‘hypocritical’

In today’s cybersecurity news… Insight Partners warns thousands after ransomware breach Venture capital and private equity firm Insight Partners is notifying 12,657 people that their…

How CISOs Make the Business Care About Cybersecurity

Five security leaders share how they built trust, won buy-in, and stopped leading with fear. We asked: “I’m a CISO who made the business care…

PREVIEW: CISO Series Podcast LIVE in Houston, TX 9-30-25

CISO Series Podcast will be heading to HOU.SEC.CON to do a live audience recording of our show. Joining me on stage will be the incomparable…

Cybersecurity News: cyber programs extended, older Apple devices attacked, chatbots aid phishing scams

In today’s cybersecurity news… House lawmakers move to extend two key cyber programs US house lawmakers unveiled a short-term funding bill extending the 2015 Cybersecurity…

Wait, SMS Doesn’t Stand for “Super Mega Secure?”

SMS messages don’t have a great security reputation. We can thank SIM swapping attacks for that. But there’s also a whole supply chain for delivering…

Cybersecurity News: Android security changes, CISA incentive audit, LLM usage

In today’s cybersecurity news… Android moving to “risk-based” security updates Since August 2015, Google has published a monthly Android Security Bulletin (ASB) listing vulnerabilities fixed…

Transforming Asset Visibility with Trend Micro

Asset visibility remains a persistent challenges in cybersecurity. Despite working on this challenge for decades, CISOs continue to struggle with knowing what assets exist in…

Cybersecurity News: ShinyHunters hits Vietnam, Petya-NotPetya copycat appears, CISA wants CVE

In today’s cybersecurity news… ShinyHunters hits Vietnam National Credit Information Center The attack was confirmed by the Vietnam Cyber Emergency Response Team, and Resecurity’s HUNTER…

Cyber Security Headlines Week in Review: Qantas penalizes executives, UK cyber legislation delayed, SonicWall VPN flaws

This week’s Cyber Security Headlines – Week in Review is hosted by Rich Stroffolino with guests Rob Teel, CTO, Oklahoma Department of Commerce and Howard…

Cybersecurity News: SonicWall VPM exploits, Fed cyberchief’s priorities, U.S spyware investment triples

In today’s cybersecurity news… SonicWall SSL VPN flaws now being actively exploited Following up on a story we covered in August, cybersecurity firm Rapid7 says…

The Pattern of Early Adoption of Security Tools

Since we started CISO Series, we understood selling cybersecurity products is quite difficult. But, it’s compounded by the trend that large companies, not smaller ones,…

Cybersecurity News: npm update, Cursor Autorun flaw details, Microsoft probe over Ascension hack?

In today’s cybersecurity news… The npm incident: nothing to fret about? In Wednesday’s show we passed along the story that an attacker compromised a developer’s…

Join Us 09-26-25 for “Hacking Security Theater” – Super Cyber Friday

Please join us on Friday September 26, 2025 for Super Cyber Friday. Our topic of discussion will be “Hacking Security Theater: An hour of critical…

Cybersecurity News: New details in blood center attack, UK EC recovers post-hack, Plex suffers new breach

In today’s cybersecurity news… Thousands had data leaked in blood center ransomware attack New York Blood Center confirmed a January ransomware attack exposed sensitive data…

We All Agree That Prevention Is the Best Advice We’re Never Going to Follow

Everyone talks about the need for prevention in cybersecurity. But the dirty secret is it’s rarely practiced because it introduces productivity friction. Will prevention always…

Cybersecurity News: GhostAction campaign, scam centers grow, GPUGate hits IT

In today’s cybersecurity news… GhostAction campaign targets GitHub On September 2nd, GitGuardian discovered that the account for a GitHub project they use internally, FastUUID, was…

What Don’t They Teach You About Dealing With a Cybersecurity Incident?

At Blackhat 2025, I asked cybersecurity professionals about what you can only learn from dealing with a real cybersecurity incident. Some related that the psychological…