Better business through smarter cybersecurity

Better business through smarter cybersecurity

All Posts

The Department of Know: Broken Glassworm, Project Lightwell, BTMOB RAT

This week’s Department of Know is hosted by Rich Stroffolino, with guests Bruce Schneier, chief of security architecture, Inrupt, and Chris Ray, field CTO, GigaOm.…

Cybersecurity News: World Cup fraud, US military location targets, IBM and Red Hat go Project Lightwell

In today’s cybersecurity news… Fraud gang steals from World Cup fans Researchers at Group-IB say a Chinese-speaking fraud network dubbed GHOST STADIUM has set up…

Customer Identity Is the Blindspot in AI Security Strategy with Transmit Security

AI browsers like OpenAI’s Atlas, Perplexity’s Comet, and an increasingly agentic Chrome and Edge are changing how consumers interact with the web, and most security…

What Does the Next Generation of Cloud Security Look Like?

We know human-paced security controls can’t be applied to autonomous AI agents. So what needs to change with CNAPP? Check out this post for the…

Cybersecurity News: Glassworm botnet shattered, China overhauls surveillance, Charter confirms ShinyHunters breach

In today’s cybersecurity news… Glassworm botnet gets shattered CrowdStrike says it worked with Google and the Shadowserver Foundation to take down Glassworm, a self-propagating credential-stealing…

Register for 6-12-26 “Hacking the Analyst Firms” – Super Cyber Friday

Please join us on Friday June 12, 2026 for Super Cyber Friday. Our topic of discussion will be “Hacking the Analyst Firms: An hour of…

20 Ways to Reimagine CNAPP Before AI Forces Your Hand

Artificial intelligence has fundamentally rewritten the rules of cloud security. It has armed defenders with unprecedented detection and automation capabilities, while simultaneously enabling attackers to…

Cybersecurity News: Nimbus Manticore, real-time credential harvesting, 12-hour patches

In today’s cybersecurity news… Nimbus Manticore learning new tricks This Iranian-backed APT with ties to the Islamic Revolutionary Guard Corps, also known as Smoke Sandstorm…

Your Identity Perimeter Is a Lie. It’s Time to Lock the Data.

Sponsored Article Changing the security paradigm We’ve spent decades building walls around who can enter the network while leaving our most sensitive files accessible to…

If You Love Cloud Misconfigurations So Much, Why Don’t You Marry Them!

Cloud misconfigurations aren’t a technical problem; they just show what your organization really cares about. CISOs are always told that time to value is paramount,…

Cybersecurity News: Megalodon infects GitHub, Netherlands server seize, Ghost CMS exploited for ClickFix

In today’s cybersecurity news… ‘Megalodon’ infects GitHub repositories Researchers at SafeDep say a supply chain attack dubbed Megalodon infected more than 5,500 GitHub repositories after…

May AMA – “I’m a security professional who has dealt with ransomware. Ask me anything about incident response and business continuity.”

Our monthly AMA on r/cybersecurity on Reddit has begun! Our topic is “I’m a security professional who has dealt with ransomware. Ask me anything about…

Cybersecurity News: Drupal KEV addition, Underminr revives domain fronting, Canadian KimWolf arrest

In today’s cybersecurity news… CISA adds Drupal Core flaw to KEV The CVE numbered flaw (CVE-2026-9082) in Microsoft Exchange Server has a CVSS score of…

The Department of Know: Google’s CodeMender, CISA’s big leak, Torvalds open-source warning

This week’s Department of Know is hosted by Rich Stroffolino, with guests Kathleen Mullin, former CISO, MyCareGorithm, and Nick Espinosa, host, Deep Dive Radio Show.…

Cybersecurity News: Cisco’s 10.0 vulnerability, Microsoft email spammed, Chrome vulnerability surge

In today’s cybersecurity news… Cisco issues 10.0 Secure Workload admin flaw warning Cisco has announced the existence of a vulnerability with a CVSS score of…

The Dangers of Picking the Wrong Vendor

Picking the wrong vendor can result in a costly transition. You have your roadmap and the vendor has its own. If you pick the wrong…

Cybersecurity News: GitHub VS Code extension breach, Shai-Hulud npm package compromise, Huawei/Luxembourg telecom link

In today’s cybersecurity news… GitHub breach via VS Code extension GitHub says about 3,800 internal repositories were breached after an employee installed a malicious Visual…

Join us for 6-5-26 “Hacking Agentic Access” – Super Cyber Friday

Please join us on Friday June 5, 2026 for Super Cyber Friday. Our topic of discussion will be “Hacking Agentic Access: An hour of critical…

What it really takes to secure healthcare

In April 2026, CISO Series brought together six security leaders from across the healthcare industry for a week-long Reddit AMA on r/cybersecurity. The stakes of…

Cybersecurity News: Microsoft hits Fox Tempest, robotics OS flaw, CISA admins leaks keys

In today’s cybersecurity news… Microsoft disrupts malware-signing-as-a-service According to unsealed court documents, Microsoft said it took down Fox Tempest, a malware code-signing service in operation…

Why Be Responsible When We Can Just Blame AI?

AI is making it easier than ever to ship fast and assign blame later. But who actually owns AI-generated code? We dig into what happens…

Cybersecurity News: Linus Torvalds talks AI bug hunters, 7-Eleven ransom demand, MENA’s new cybercrime op

In today’s cybersecurity news… Linus Torvalds not into AI bug hunters Linus Torvalds says AI-powered bug hunting tools are overwhelming the Linux kernel security mailing…

Rethinking Tabletops with Reflex Security

The tabletop exercise has a complacency problem. Organizations run through their incident response plans, everyone nods along, and the debrief confirms what the team already…

Cybersecurity News: Grafan GitHub extortion, Microsoft rejects Azure report, Funnel Builder flaw

In today’s cybersecurity news… Grafana GitHub token breach leads to extortion attempt Grafana Labs disclosed that an attacker gained unauthorized access to part of the…