All Articles

Actionable Insights For CISOs:

• Strengthen internal defences for SIM-swap / mobile porting threats

  • Require robust identity proofing for telecom / mobile-number porting requests for employees.

  • Monitor and alert on anomalous mobile-account activ

This is my completely informal, uncertified, unreviewed and otherwise completely unofficial blog inspired by my reading of our next Cloud Threat Horizons Report, #12 (full version) that we just released (the official blog for #1 report, my unofficial

Executive Summary

Based on comprehensive analysis of cybersecurity sources, no major cybersecurity incidents were confirmed to have occurred specifically on July 7, 2025. However, this date marked significant activity in cybersecurity reporting, threa

A 23-year-old Scottish man thought to be a member of the prolific Scattered Spider cybercrime group was extradited last week from Spain to the United States, where he is facing charges of wire fraud, conspiracy and identity theft. U.S. prosecutors al

This is my completely informal, uncertified, unreviewed and otherwise completely unofficial blog inspired by my reading of our next Threat Horizons Report, #11 (full version) that we just released (the official blog for #1 report, my unofficial blogs

Key Questions Explored:

• What are the biggest challenges faced in the healthcare industry from a cybersecurity perspective?
• How is AI being used in the education sector for cybersecurity?
• How can AI be leveraged from a defense perspective to counter

Cybersecurity is a constantly changing battleground, where threats are evolving more rapidly than ever before. For Enoch Long, Field CISO at JupiterOne, navigating this complex environment requires not only technical expertise, but also a calm and st

Explore the unique cybersecurity challenges faced by SMBs in today's interconnected landscape, where the threat of ransomware looms large. Brad emphasizes the importance of adopting a smarter approach to security validation, focusing on optimizing r

This blog post offers cybersecurity predictions for 2021, emphasizing the evolving threat landscape and the need for continuous improvement.

A new study by Cambridge Cybercrime Centre titled Cybercrime is (often) boring: maintaining the infrastructure of cybercrime economies concludes that cybercrime is boring and recommends authorities change their strategy to highlight the tedium in ord

Cybersecurity in 2020 will be evolutionary but not revolutionary.  Although there is always change and churn, much of the foundational drivers remain relatively stable.  Attacks in the next 12 months are likely to persist in ways already known but ta

Defining The Scope

• Embedding human security as a part of organization culture
• Empowering and enabling every individual

Understanding The Attack Surface & Risks

• Expansion of attack surface due to merging of official and personal spaces
• Non-o

At CISO Platform Annual Summit 2017, we had a panel discussion on the topic of Security Strategy for BFSI in 2018: Handling Changes in Threat and Regulatory Landscape,  including industry stalwart like Parag Deodhar (Chief Information Security Office

The Strategic Advantage of Adaptive Multi-Engine Advanced Threat Protection (RSA Conference 2017)

The dramatic rise in malicious code designed to evade detection, specifically from network sandboxes, caused industry analysts to suggest the deployment

Your Sector Doesn’t Matter:  Achieving Effective Threat Prioritization ( RSA Conference 2017)

Many organizations’ security functions determine what threats they care about based on what threats are known to be affecting their sector, or comparably sim

We believe, isn't a single technology/solution but is a complex program which consists of people, process and technology. Sandboxing or any single technology can only provide partial protection against “real” advanced attacks. We suggest organizat