Better business through smarter cybersecurity

Better business through smarter cybersecurity

All Posts

They’re Less “Best Practices” and More “Sounds Good on LinkedIn”

Security thrives on context. So why does cybersecurity as an industry get so caught up with universal concepts that often can’t be applied?/ This week’s…

Transitioning to Quantum-Safe Encryption with enQase

The transition to post-quantum cryptography isn’t a single event. It’s a long migration that most organizations haven’t started. The threat is already active: adversaries are…

The Department of Know: OpenAI vulnerability scanner, US new cyber strategy, VPN SEO poisoning

This week’s Department of Know is hosted by Rich Stroffolino with guests Jonathan Waldrop, CISO, Acoustic, and Chris Ray, Field CTO, GigaOm Missed the live…

Cybersecurity News: Royal Bahrain Hospital breach, Canada’s Loblaw breached, New York water laws

In today’s cybersecurity news… Payload Ransomware group claims breach of Royal Bahrain Hospital The ransomware gang has added the healthcare facility to its Tor data…

Reddit AMA – “I’ve built diverse, high-performing security teams. Ask Me Anything about hiring, culture, and talent management in cybersecurity.”

Our monthly AMA on r/cybersecurity on Reddit has begun! Our topic is “I’ve built diverse, high-performing security teams. Ask Me Anything about hiring, culture, and…

Cybersecurity News: Iran boosts cyberattacks, VENON targets Brazilian banks, England Hockey investigates breach

In today’s cybersecurity news… Iran boosts cyberattacks According to research from Check Point, Iran’s Ministry of Intelligence and Security is working with cybercriminal groups to…

Experience the CISO Series Podcast LIVE in Boston (4-30-26)

Boston-area cybersecurity professionals unite for a fun evening of networking and a live audience recording of the CISO Series Podcast, hosted by David Spark, founder of CISO…

Are Your Security Tools Creating More Work for Your Team?

Security tools are supposed to solve problems and make our lives easier. Why does it seem like they’re doing the opposite and creating more work?…

Cybersecurity News: Meta offers scam protection, Google’s Wiz acquisition finalized, China curbs OpenClaw use

In today’s cybersecurity news… Meta apps offer new scam protection Meta is adding new scam detection features across Facebook, Messenger, and WhatsApp to warn users…

What changes when you’ve been a CISO more than once?

The job title stays the same. But what doesn’t stay the same is the org chart, the industry, the budget, or the board. So what…

Cybersecurity News: New Cyber Command chief, Russia targets Signal, Codex Security

In today’s cybersecurity news… NSA and Cyber Command head confirmed In a rare floor vote, the US Senate voted 71-29 to confirm Army Lt. General…

It’s Okay to Put All Your Eggs in One Basket as Long as You Really Trust the Basket

Hero culture is still distressingly common in cybersecurity. While it’s good to have people you can count on when the going gets tough, building up…

Cybersecurity News: InstallFix spreads fake Claude sites, UNC4899 breaches crypto, UK cyber-fraud crackdown

In today’s cybersecurity news… InstallFix attacks spread fake Claude code sites Researchers at Push Security uncovered a malvertising campaign dubbed “InstallFix” that spreads fake Claude…

Join us on 3-21-26 for a LIVE CISO Series Podcast Recording at BSidesSF

If you’re already heading to RSA Conference later this month, then why not join us at BSidesSF for a live podcast recording? Joining me on…

Department of Know – Quantum-Safe certificates, Iranian cyberattack risks, 90 zero-days

This week’s Department of Know is hosted by Sarah Lane with guests John Barrow, CISO, JB Poindexter & Co., and Derek Fisher, Director of the…

Cybersecurity News: FBI network breach, GitHub distributes stealer, Hackers abuse .arpa

In today’s cybersecurity news… FBI investigates suspicious activities on agency network The investigation focuses on a cybersecurity breach suffered by the Digital Collection System Network,…

April is Trust Month for Super Cyber Friday

Deciding where to invest our trust is at the heart of cybersecurity. Zero trust as a framework isn’t about not trusting anything, but setting out…

Cybersecurity News: Apple blocks ByteDance, Google’s 90 zero-days, Iran backdoors U.S. organizations

In today’s cybersecurity news… Apple blocks ByteDance Chinese apps These technical restrictions will stop iOS users in the U.S. from downloading other apps from TikTok…

Why Overpromising is a Dangerous Sales Tactic

Cybersecurity sales lives and dies on trust. So why do so many vendors burn bridges just to get a foot in the door? Check out…

Cybersecurity News: iPhone-hacking toolkit used by spies, HungerRush extortion emails, Tycoon phishing platform dismantled

In today’s cybersecurity news… Possible iPhone-hacking toolkit used by spies An iPhone hacking toolkit called Coruna has likely infected tens of thousands of devices and…

Cybersecurity News: Quantum decryption, OpenAI’s deal, South Korea leaks crypto keys

In today’s cybersecurity news… Quantum decryption gets theoretically easier When we talk about quantum computers breaking cryptography, we’re specifically referring to their ability to solve…

Our Security Team’s Love Language is Buying New Tools

It’s easy to focus on the latest advancements in security tooling. But security incidents often don’t happen because you lacked the latest and greatest technology.…

Cybersecurity News: Chrome quantum-safe certificates, Gemini Live vulnerability, UK warns of Iranian cyberattacks

In today’s cybersecurity news… Chrome unveils Quantum-Safe certificates Google’s Chrome team is testing quantum-resistant HTTPS certificates to protect against future attacks by quantum computers. The…

The Department of Know: iPhone, iPad and Grok get greenlight, WiFi gets snitched, Block drops job chops

This week’s Department of Know is hosted by Rich Stroffolino with guests Dan Holden, CISO, Commerce, and Mark Eggleston, CISO, CSC Missed the live show?…