Better business through smarter cybersecurity

Better business through smarter cybersecurity

All Posts

Join us on 4-27-26 for a LIVE CISO Series Podcast Recording in NYC

New York-area cybersecurity professionals unite for an exclusive evening of networking and a live audience recording of the CISO Series Podcast. Hosted by me, David…

Do You Think These Compliance Boxes Check Themselves? (LIVE in Clearwater, FL)

Compliance regimes and security awareness training have been around for time immemorial in cybersecurity. But for all the money we’ve invested in them, have they…

Cybersecurity News: macOS Terminal ClickFix attacks, Russian court sentences ‘Flint’, CareCloud probes data breach

In today’s cybersecurity news… macOS Terminal gets ClickFix attacks Apple added a new macOS Tahoe 26.4 security feature that warns users and delays execution when…

You can’t trust your eyes anymore. Here’s what you CAN do.

The old deepfake tells are gone. Hands, clothing artifacts, lag… None of it works anymore. In this conversation, David Spark sits down with Chris Pierson,…

The Cool and Not-So-Cool of RSA 2026

Every year, San Francisco’s RSA Conference acts as a useful time stamp for the state of the cybersecurity industry. It’s a time stamp to reflect…

The Department of Know: Gemini scours Darkweb, NSA worries about cybersecurity, APIs run loose

This week’s Department of Know is hosted by Rich Stroffolino with guests Dennis Pickett, vp, CISO, RTI International, and Jacob Combs, CISO, Tandem Diabetes Care…

Cybersecurity News: FBI email theft, Lloyds Bank glitch, API keys running loose

In today’s cybersecurity news… FBI confirms theft of director’s personal emails The announcement is in regard to photographs of FBI Director Kash Patel which were…

Cybersecurity News: Alleged RedLine dev extradited, Red Menshen spies with BPFDoor, is US cybersecurity slipping?

In today’s cybersecurity news… Alleged RedLine dev extradited to US An alleged developer of the RedLine infostealer malware, Hambardzum Minasyan, was extradited from Armenia to…

How to Engage With a CISO When They Express Interest

When a CISO walks up to a vendor booth, it should be a golden opportunity to connect. So why do so many vendors not know…

Cybersecurity News: Torg Grabber targets crypto, TeamPCP backdoors LiteLLM, GitHub AI bug detection

In today’s cybersecurity news… Torg Grabber targets crypto wallets A new infostealer called Torg Grabber is targeting more than 850 browser extensions, including 728 cryptocurrency…

Join Us 04-10-26 for “Hacking Vendor Trust” – Super Cyber Friday

Please join us on Friday April 10, 2026 for Super Cyber Friday. Our topic of discussion will be “Hacking Vendor Trust: An hour of critical…

Cybersecurity News: FCC router ban, drone hit AWS, Crunchroll leak

In today’s cybersecurity news… FCC bans foreign routers The US Federal Communications Commission updated its “Covered List” of products barred from FCC clearance in the…

Why Highlight Diversity When We Can Just Hope You Don’t Notice?

Despite making strides, it’s still common to see cybersecurity lineups that lack representation. When we call out these kinds of incidents, what are we hoping…

Cybersecurity News: DarkSword exploit hits GitHub, Gemini AI agents scour dark web, Trivy supply chain attack expands

In today’s cybersecurity news… New DarkSword exploit hits GitHub A newer version of the DarkSword iPhone hacking toolkit has been leaked on GitHub, making it…

The Department of Know: SaaS apps enable breaches, real-time cyber protection, IoT botnet takedown

This week’s Department of Know is hosted by Rich Stroffolino with guests Bil Harmer, CISO, Supabase, and Chris Ray, Field CTO, GigaOm Missed the live…

Cybersecurity News: International botnet takedown, California city ransomed, Azure Monitor phishing

In today’s cybersecurity news… Law enforcement seizes botnet infrastructure Agencies and tech companies from the U.S., Germany, and Canada collaborated on an operation designed to…

Your Customers Already Know You’re Not Transparent

Why the security review ritual is broken, and what it actually looks like to earn vendor trust Every vendor in security claims their customers trust…

Cybersecurity News: Critical SharePoint flaw, real-time cyberattack prevention, CISA’s Intune warning

In today’s cybersecurity news… Critical Microsoft SharePoint flaw now exploited in attacks According to CISA, this CVE-numbered flaw, which was patched in January, is now…

Join the CISO Series Podcast LIVE in NYC (4-27-26)

New York-area cybersecurity professionals unite for an exclusive evening of networking and a live audience recording of the CISO Series Podcast, hosted by David Spark,…

Who is Responsible for the Conflict Between Security and Developers?

We know there’s tension between security teams and developers. But where does this tension start? Is the constant friction between developers and security teams is…

Cybersecurity News: DarkSword emerges, “ShieldGuard” dismantled, NK IT worker army rakes in money

In today’s cybersecurity news… DarkSword emerges from suspected Russian hackers Researchers from iVerify, Lookout, and Google identified a new iOS exploit kit called “DarkSword,” linked…

Join Us 04-03-26 for “Hacking Trust in Leadership” – Super Cyber Friday

Please join us on Friday April 03, 2026 for Super Cyber Friday. Our topic of discussion will be “Hacking Trust in Leadership: An hour of…

Cybersecurity News: Energy strategy, scammer accord, font-rendering attack

In today’s cybersecurity news… Energy Department to release first cyber strategy According to the acting director of the Office of Cybersecurity, Energy Security, and Emergency…

Cybersecurity News: Stryker hospital tools safe, models apply to power AI scams, cybercrime up 245%

In today’s cybersecurity news… Stryker hospital tools safe, digital ordering services down Medical device maker Stryker said its hospital equipment and connected products remain safe…