Better business through smarter cybersecurity

Better business through smarter cybersecurity

All Posts

Should You Use Native or 3rd Party Cloud Management Tools?

“Secure by Design” gets thrown around in the cloud a lot, but what do we actually mean by that? And is it even achievable? Check…

Cybersecurity News: OpenAI’s GPT-5.4-Cyber, McGraw Hill blames Salesforce for breach, signed adware disables antivirus

In today’s cybersecurity news… OpenAI rolls out GPT-5.4-Cyber OpenAI is rolling out GPT-5.4-Cyber to a limited group of trusted users to help identify software vulnerabilities,…

Protecting executives beyond the office

Executives are high-value targets. Attackers know that the easiest way in isn’t through the corporate firewall. It’s through the home. In this conversation, David Spark…

Join on 5-1-26 for “Hacking the Death of Entry-Level Jobs” – Super Cyber Friday

Please join us on Friday May 1, 2026 for Super Cyber Friday. Our topic of discussion will be “Hacking the Death of Entry-Level Jobs: An…

Cybersecurity News: Ransomware drama, faked Ledger app, Treasury wants Mythos

In today’s cybersecurity news… Ransomware rivals turn on each other A ransomware group listing a company on their leak site is a distressingly commonplace occurrence.…

Our Theoretical Controls Work Great Against Hypothetical Attacks

Cybersecurity frameworks are a great starting point for any organization. But none will survive first contact with a production environment without accounting for local context.…

Cybersecurity News: Claude Mythos Preview’s capabilities, Anodot breached companies face extortion, wolfSSL flaw enables forged certificates

In today’s cybersecurity news… Claude Mythos Preview’s cyber capabilities The AI Security Institute reports that Claude Mythos Preview shows a significant jump in cyber capabilities,…

Cybersecurity News: Adobe patches zero-day, Marimo flaw exploited, Venice flood threat

In today’s cybersecurity news… Adobe patches months-old Reader zero-day Following up on a story we covered on Friday, “Adobe on Saturday released emergency patches for…

Cybersecurity News: Android API exposure, Acrobat Reader zero-day, Bitcoin Depot cyberattack

In today’s cybersecurity news… Google API keys in Android apps expose Gemini endpoints Researchers from Truffle Security are warning that API keys for public services…

How Should We Measure the Performance of a CISO?

How does the business determine what counts as success for a CISO? What warrants a raise in salary? Check out this post for the discussion…

Cybersecurity News: ChipSoft popped, APT28 updates, CIA cyber espionage elevation

In today’s cybersecurity news… Ransomware knocks Dutch healthcare vendor offline The attack impacted the Dutch software vendor ChipSoft, which provides patient record software to 80%…

Join Us 04-24-26 for “Hacking Trust in Security” – Super Cyber Friday

Please join us on Friday April 24, 2026 for Super Cyber Friday. Our topic of discussion will be “Hacking Trust in Security: An hour of…

Cybersecurity News: Anthropic’s Project Glasswing, CISA funding in doubt, routers hijacked for passwords

In today’s cybersecurity news… Anthropic announces Project Glasswing Anthropic says its unreleased AI model, Claude Mythos Preview, is powerful enough to autonomously discover and even…

Remember, Every Underappreciated Risk Is Just a Crisis Waiting to Be Discovered

Quantitative risk management promises to be the missing piece of the cybersecurity puzzle, allowing CISOs to better connect their work to tangible business outcomes. But…

Cybersecurity News: Drift blames exploit on North Korea, GitHub attacks target South Korea, Die Linke breach threatens data leak

In today’s cybersecurity news… Drift says exploit was North Korean intelligence operation A North Korean state-linked group apparently spent about six months infiltrating Drift Protocol…

Join the CISO Series Podcast LIVE in Boston (4-30-26)

Boston-area cybersecurity professionals unite for an evening of networking and a live audience recording of the CISO Series Podcast, hosted by David Spark, founder of…

The Department of Know: Axios malware, TeamPCP campaign, New Storm infostealer

This week’s Department of Know is hosted by Sarah Lane, with guests Jack Kufahl, CISO, Michigan Medicine, and Adam Palmer, CISO, First Hawaiian Bank. Missed…

Cybersecurity News: Malicious npm packages, CISA budget cuts, hackers exploit React2Shell

In today’s cybersecurity news… 36 Malicious npm packages exploited to deploy persistent implants Researchers at security firm SafeDep have discovered 36 malicious packages in the…

The Same Person Keeps Showing Up. Here’s What He Keeps Saying.

Sponsored article Eight episodes. Eight ThreatLocker products. One chief product officer who doesn’t sugarcoat anything. Rob Allen, chief product officer for ThreatLocker, has been on…

Cybersecurity News: Texas hospital breach, CISA orders NetScaler patch, ISO file RAT warning

In today’s cybersecurity news… 250,000 affected by data breach at Texas hospital The incident occurred at Nacogdoches Memorial Hospital (NMH) in the city of Nacogdoches,…

How to Be Less Busy and More Effective in Cyber

There’s no shortage of frameworks that offer ways to manage and configure your security program. While they may be providing some guidance, are they offering…

Cybersecurity News: Apple pushes new patches over DarkSword, FBI: US surveillance hack is major incident, Cisco code stolen in Trivy-linked breach

In today’s cybersecurity news… Apple pushes new patches over DarkSword Apple told Wired it’s releasing rare “backported” security patches for iOS 18 to protect users…

Join Us 04-17-26 for “Hacking AI Trust” – Super Cyber Friday

Please join us on Friday April 17, 2026 for Super Cyber Friday. Our topic of discussion will be “Hacking AI Trust: An hour of critical…

Cybersecurity News: Axios poisoned, TeamPCP details, Claude Code leaked

In today’s cybersecurity news… HTTP client introduces malicious dependency Axios, a widely used HTTP client library on npm, was hijacked by threat actors to introduce…