Better business through smarter cybersecurity

Better business through smarter cybersecurity

All Posts

Elevating the SOC with Prophet Security

SOC analysts don’t need more alerts. They need fewer. But the AI tools vendors have shipped to address that have often delivered the opposite: new…

Cybersecurity News: Feds ban Fable, Maine portal disabled, ShinyHunters exploits Oracle

In today’s cybersecurity news… Feds require Anthropic to ban ‘foreign national’ access to Fable, Mythos Following up on a product that has dominated headlines this…

The Department of Know: CISA’s quick patch, Miasma attacks, judge finds AI guilty

This week’s Department of Know is hosted by Rich Stroffolino, with guests Brett Conlon, CISO, American Century Investments, and Jason Thomas, senior director, technology security,…

Cybersecurity News: Fortinet patches FortiSandbox, GitHub disables npm scripts, Nottingham University breach

In today’s cybersecurity news… Fortinet patches a new critical FortiSandbox flaw Fortinet has released security updates “to address several vulnerabilities affecting FortiSandbox, FortiOS, FortiProxy, and…

Join us 6-26-26 for “Hacking Leadership Skills”

Please join us on Friday June 26, 2026 for Super Cyber Friday. Our topic of discussion will be “Hacking Leadership Skills: An hour of critical…

CISOs Buy For Selfish and Politically Risk-Averse Reasons (Not Because Your Product is the Best)

Everyone says they want the best security tools for their organizations. But sometimes the best tools are the ones a CISO can defend buying. The…

Cybersecurity News: Big Patch Tuesday, ‘Nightmare Eclipse’ drops Windows 0-day, Claude Fable restricted at Microsoft

In today’s cybersecurity news… A Patch Tuesday for the books Microsoft released a record June Patch Tuesday with nearly 200 security fixes, including around 35…

If Identity Is the New Perimeter, Why Are We Still Trusting It on Day One?

Sponsored article The entire security stack, from endpoint detection to privileged access management, is built on one assumption: that the person behind the credential is…

Cybersecurity News: Claude Fable 5, Tchap hacked, CISA priorities

In today’s cybersecurity news… Anthropic releases Claude Fable 5 Ever since Mythos Preview was announced, everyone has been itching to get access to Anthropic’s new…

There’s Nothing an LLM Can Screw Up That the Cloud Didn’t Do First

In our hurry to embrace LLMs and agents, we seem to be repeating all the same mistakes we made when we rushed to the cloud.…

Cybersecurity News: Claude & Gemini malware, Mythos sneaky flaws, Instagram AI abuse

In today’s cybersecurity news… Microsoft malware hits Claude and Gemini users On June 6th, OpenSourceMalware.com reported that GitHub had disabled 73 Microsoft repositories, including the…

Securing AI Agents with CompFly AI

Every company wants AI agents in production… yesterday. The trouble is that these agents are a new class of digital worker, and most organizations have…

Cybersecurity News: CISA Palantir Director, EU tech sovereignty, SolarWinds Serv-U flaw

In today’s cybersecurity news… Palantir executive considered for CISA leadership Following up on a story we covered  last week regarding DHS Secretary Markwayne Mullin’s comment…

The Department of Know: NVD audit, Meta’s leaky AI, Microsoft is closer to quantum

This week’s Department of Know is hosted by Rich Stroffolino, with guests Robb Dunewood, host, Daily Tech News Show, and David Cross, CISO, Atlassian. Missed…

Cybersecurity News: Chinese cybercrime group, Cisco CM flaw, CISA faces changes

In today’s cybersecurity news… Chinese cybercrime group sets record pace According to Proofpoint, the group, currently tracked as TA4922, “has been escalating activities and expanding…

Cybersecurity Has Become a Cult

We think of cybersecurity as a discipline. But when do ideas like best practices and NIST frameworks change into a system of belief? Check out…

Cybersecurity News: Illegal streamers, EU digital sovereignty, cost of a cyber force

In today’s cybersecurity news… Law enforcement cracks down on illegal streamers Bulgaria, in coordination with Europol and private security vendors, led a seven-month effort dubbed…

Every Host Has to Learn Their Listeners Matter More Than Them

Most listeners never think about what goes into the shows they trust. David Spark of CISO Series and Dave Bittner of The CyberWire have each…

Why Workflow Automation Failed GRC (And How Agentic GRC Will Fix It)

Sponsored article Workflow automation was supposed to solve GRC’s scaling problem. Instead, it just created faster procedures that were stalled by humans who had to…

Cybersecurity News: Russia claims officials’ surveillance, Project Glasswing expands, CISA flags two-year-old Oracle flaw

In today’s cybersecurity news… Russia claims officials’ surveillance Russia’s Federal Security Service (FSB) claims foreign intelligence agencies infected the smartphones of senior officials with malware…

Our Data Security Policy Is Transparent in That It Doesn’t Exist

The current crop of data security tools are built like X-rays. They spot the credit card numbers in the S3 bucket and call it a…

Cybersecurity News: Meta AI hands over Instagram access, Dutch police dismantle botnet, RedHat packages backdoored

In today’s cybersecurity news… Meta AI hands over Instagram account access Attackers exploited Meta’s AI support chatbot to take over high-profile Instagram accounts, such as…

Automating Offensive Security with XBOW

Penetration testing hasn’t fundamentally changed in decades, and it’s starting to show. You commission a test, wait for the report, and by the time it…

Cybersecurity News: GlobalProtect VPN exploited, ChatGPT share links exploits, Feds criticize NIST

In today’s cybersecurity news… Palo Alto GlobalProtect VPN auth bypass flaw now exploited in attacks The company is warning that “hackers are now exploiting a…