Better business through smarter cybersecurity

Better business through smarter cybersecurity

All Posts

Cybersecurity News: Gottumukkala ousted, Wyden blocks Rudd, Hackers weaponize Claude

In today’s cybersecurity news… Gottumukkala ousted as CISA Director This departure follows widespread dissatisfaction with the agency’s performance over the past year with particular bipartisan…

Cybersecurity News: NATO adopts Apple, Education and Healthcare backdoor, Apex One flaws

In today’s cybersecurity news… iPhone and iPad cleared for classified NATO work The announcement was made yesterday by Apple that its phones and tablets are…

Should You Phish Your Employees or Not?

We know that phishing is a major threat vector. So why does it seem like phishing tests only make things worse? Check out this post…

Cybersecurity News: Google disrupts UNC2814, TriZetto breach impacts 3M+, Cisco bug exploited since 2023

In today’s cybersecurity news… Google disrupts UNC2814 Google says it disrupted a Chinese linked hacking group known as UNC2814, or Gallium, that breached at least…

What happens when cybersecurity marketers get criticized by CISOs?

At Cyber Marketing Con 2025 in Austin, TX, David Spark posed a question to the industry: “Have you ever done a marketing effort that didn’t…

Cybersecurity News: Hacked in 30 minutes, Claude distillation, DeFi shutdown after attack

In today’s cybersecurity news… Threat actors break out in under 30 minutes According to CrowdStrike’s annual global threat report, the average breakout time from initial…

If We Can’t Do Better, at Least Do It Faster

We see third-party breaches in the news all the time. Odds are, most of those companies produced clean audit reports and filled in questionaires. If…

Cybersecurity News: US healthcare breach affects 140k, experts warn against replicating humans, Shai-Hulud-like worm targets devs

In today’s cybersecurity news… 140k affected by US healthcare breach Nearly 140,000 people were affected by a data breach tied to South Carolina-based Vikor Scientific,…

Solving GRC Complexity with Anecdotes

Governance, risk, and compliance teams face a fundamental paradox: they operate in a discipline built on certainty, manual processes, and clear checklists, yet they’re being…

The Department of Know: Chrome zero-day, exploits, Copilot summarizes confidential emails, identity abuse problems

This week’s Department of Know is hosted by Rich Stroffolino with guests Montez Fitzpatrick, CISO, Navvis, and Peter Gregory, author. The Department of Know  is…

Cybersecurity News: Arkanix was POC, 600 Fortinet firewalls breach, Russia heightens tension

In today’s cybersecurity news… Arkanix Stealer – the new AI info-stealer experiment Researchers from Kaspersky now say that an information-stealing malware operation named Arkanix Stealer,…

Reddit AMA – “I’ve been a CISO more than once. Ask me anything about how the job differs between organizations.”

Our monthly AMA on r/cybersecurity on Reddit has begun! Our topic is “I’ve been a CISO more than once. Ask me anything about how the…

Cybersecurity News: CISA’s DELL order, Android AI malware, browsers as weak link

In today’s cybersecurity news… CISA orders urgent patch of Dell flaw Following up on a story we covered yesterday, CISA has now ordered government agencies…

How Much Autonomy Should You Give AI Agents in Your SOC?

Agentic AI was the buzzword of the year in 2025. Everyone wants to figure out how to use agents, but how do you know how…

Cybersecurity News: Copilot summarizes confidential emails, ShinyHunters targets CarGurus, Texas sues TP-Link

In today’s cybersecurity news… Microsoft Copilot summarizes confidential emails Microsoft says a code bug in Microsoft 365 Copilot caused the AI to summarize emails marked…

Budget Cuts Don’t Mean Security Cuts: What CISOs Learned from Doing More with Less

When the budget axe falls, security leaders face an impossible-sounding task: reduce risk with fewer resources. But as a recent CISO Series AMA revealed, some…

Join us 03-06-26 for “Hacking Citizen Developers” – Super Cyber Friday

Please join us on Friday March 6, 2026 for Super Cyber Friday. Our topic of discussion will be “Hacking Citizen Developers: An hour of critical…

Cybersecurity News: Hacking protestors, UK “locks the door,” Kenyan politician phone cracked

In today’s cybersecurity news… Hackers target anti-government protestors Researchers at Acronis discovered a cyberespionage campaign targeted supporters of recent anti-government protests in Iran. Since early…

We Gave the CISO Risk and Liability, and Now They Want Authority. The Nerve.

Being a CISO can feel like a no-win situation. While the role is now common in organizations, they often face an imbalance of responsibility and…

Cybersecurity News: Eurail traveler data for sale, EU Parliament blocks AI features, Washington Hotel discloses ransomware hit

In today’s cybersecurity news… Eurail stolen traveler data now up for sale Eurail says data stolen in a recent breach is now being offered for…

The Department of Know: VoidLink threatens multi-cloud, flaw threatens Claude extension, China practices on infrastructure

This week’s Department of Know is hosted by Sarah Lane with guests Jon Collins, Field CTO, GigaOm, and Adam Palmer, CISO, First Hawaiian Bank Missed…

Cybersecurity News: Ivanti actor identified, search overviews manipulated, ClickFix leverages Nslookup

In today’s cybersecurity news… One threat actor responsible for 83% of recent Ivanti RCE attacks “A single IP address hosted on bulletproof infrastructure is responsible…

Cybersecurity News: Hackers abuse Gemini, Apple patches ancient bug, CISA criticizes shutdown

In today’s cybersecurity news… Hackers abuse Gemini AI for all attack stages, says Google A report released yesterday from the Google Threat Intelligence Group confirms…

Cybersecurity’s Broken Hiring Process

Something is wrong with the math in the cybersecurity job market. If there are “millions” of unfilled jobs out there, why are so many job…