Better business through smarter cybersecurity

Better business through smarter cybersecurity

All Posts

Cybersecurity News: Malicious Go module, new Mirai botnet, Silk Typhoon exploits cloud

In today’s cybersecurity news… Malicious Go module steals credentials via Telegram Researchers at cybersecurity firm Socket are warning of a malicious Go module that “presents…

Cyber Security Headlines Week in Review: CISA infrastructure plea, podcast interview trap, Workday breach

This week’s Cyber Security Headlines – Week in Review is hosted by Rich Stroffolino. This is our milestone edition, celebrating five years of the daily…

Cybersecurity News: Apple’s urgent update, Scattered Spider sentence, Microsoft seeks SSD feedback

Apple urges iPhone, iPad and Mac update ASAP The update, identified as 18.6.2 responds to a vulnerability that affects ImageIO, which “lets applications read and…

Do You Have a Functional Policy or Did You Just Write One?

Do you have a policy for a certain issue that people know about, have been trained on, and actually apply? Or did you write one…

Cybersecurity News: Apple zero-day patch, Jailbreaking ChatGPT-5 Pro, 7-year old Cisco Vulnerability exploited

In today’s cybersecurity news… A patch today keeps the zero-day away Apple has released emergency security updates after discovering a new zero-day flaw that is…

Navigating Security Careers In and Out of Government

“I’m a security professional who has worked in and out of Government roles. I can tell you the pros and cons. Ask me anything.” That…

Using Configuration Management to Build Resilience

At Black Hat 2025, I talked with Danny Jenkins, CEO at ThreatLocker, about a sobering statistic: 90% of successful ransomware attacks happen because security tools…

Join Us 09-05-25 for “Hacking AI in Meetings” – Super Cyber Friday

Please join us on Friday, September 5, 2025, for Super Cyber Friday. Our topic of discussion will be “Hacking AI in Meetings: An hour of…

Cybersecurity News: UK drops Apple backdoor mandate, Allianz Life breach impacts 1.1M, attack stifles speed cameras

In today’s cybersecurity news… UK agrees to drop ‘backdoor’ mandate for Apple devices Britain dropped its demand that Apple build a “backdoor” into its encrypted…

I Just Can’t Communicate With the Business. I’ve Tried Condescension AND Derision.

While making informed technical decisions is key for a CISO, the biggest problems they face often aren’t technical. Instead they stem from a failure to…

Cybersecurity News: Workday breach, post-quantum alliance, Chinese group targets Taiwan

In today’s cybersecurity news… Workday confirms data breach Over the weekend, the human resources technology giant confirmed that threat actors accessed a third-party customer relationship…

PREVIEW: CISO Series Podcast LIVE in Boca Raton, FL 9-12-25

CISO Series Podcast will be at the 2025 SFISSA Hack the Flag Conference to do a live audience recording of our show. Joining me on…

Proving Trust with Drata

Proving trust is one of the primary challenges facing cybersecurity today. Just look at the rash of data leaks coming from third parties in the…

Cybersecurity News: Cisco firewall warning, Colt Telecom cyberattack, CISA’s OT request

Cisco warns of maximum-severity defect in firewall software According to an advisory published by the company on Thursday, this flaw affects the company’s Secure Firewall…

Cyber Security Headlines Week in Review: ShinyHunters, Scattered Spider merge, DARPA AI prize, Water system volunteers

This week’s Cyber Security Headlines – Week in Review is hosted by Rich Stroffolino with guest Steve Zalewski, co-host, Defense in Depth Missed the live…

Cybersecurity News: NFC fraud reappears, Canada government breach, Zoom’s critical flaw

In today’s cybersecurity news… New wave of NFC relay fraud, call hijacking, and root exploits in banking sector Researchers at ThreatFabric have released a report…

Where are We Struggling with Zero Trust

Everyone seems like they are on board with the principles of zero trust. So why do we see implementation lagging? Check out this post for…

Cybersecurity News: Court filing system hack explained, PA AG weighs in on attack, Fortinet attacks raise concerns

In today’s cybersecurity news… Hack of federal court filing system exploited security flaws known since 2020 Politico reports that a sweeping hack of the federal…

Cybersecurity News: Fortinet SSL VPNs getting hammered, The Netherlands critical infrastructure compromise, Africa the most targeted for cyber attacks

In today’s cybersecurity news… The hits just keep on coming Only a couple of weeks after a critical Fortinet vulnerability was added to CISA’s Vulnerabilities…

DEMO: Cutting Log Costs and Boosting Search Speed With Scanner

Security teams need log visibility to detect threats, but skyrocketing costs make full coverage unsustainable. How do you retain visibility without compromising budget or speed?…

Impressive! Our AI is Approaching “One 9” of Accuracy.

Large language models can do a lot of things. But they are hardly infallible. We continue to see stories emerge of organizations relying on the…

Cybersecurity News: North Korean crypto theft, Microsoft rolls out back up, four charged in global scheme

North Korean crypto theft Three IT specialists secretly working for North Korea allegedly stole around $1 million USD in cryptocurrency from a New York company…

Reducing SIEM Costs with Scanner

SIEM costs are spiraling out of control for organizations. Increasing log volumes, longer compliance-driven retention requirements, and the habit of collecting everything “just in case,”…

Cybersecurity News: DARPA code prize, ScarCruft adds ransomware, Columbia breach tally

In today’s cybersecurity news… DARPA awards $4 million prize for AI code review at DEF CON The winner of a two-year competition to “create the…