TL;DR for CISOs: Researchers showed that a single planted AGENTS.md or CLAUDE.md file can steer an AI coding agent into running malw
TL;DR for CISOs: Citrix has patched a third NetScaler flaw to be exploited within days, this one in SAML-configured appliances, and a
Should cybersecurity be oriented to reduce the security friction for savvy workers? Discover how to build a strong security culture by balancing freedom and control, and the importance of continuous communication. Ashley shares insights on rewarding
The cybersecurity threat landscape on July 23, 2025, revealed multiple critical security incidents acros
A coalition of banking industry associations, including SIFA, the American Bankers Association (ABA), Bank Policy Institute (BPI), and several other lobbying groups have made a disgraceful appeal to the SEC to eliminate the rule requiring public disc
In today’s fast-paced digital world, small and medium-sized businesses (SMBs) face ever-growing cyberattack threats. While technological advancements have provided businesses with unprecedented opportunities, they have also exposed them to significan
The Cybersecurity Vault - episode 39, with guest Ian Thornton-Trump.
China is one of the most aggressive nation states when it comes to cybersecurity. They possess a renown global proficiency in attacking digital networks, harvesting sensitive data,
In today's digital landscape, where cyber threats constantly evolve, security testing has become integral to the software development lifecycle (SDLC). Ensuring that your software is secure from the onset is not just a best practice; it's a necessity
The enactment of the India Privacy Act has ushered in a new era of data protection regulations, presenting significant challenges and opportunities for organizations across the country. In this blog, we delve into the intricacies of the Act, its impl
The India Privacy Act introduces a new era of data protection and privacy regulations in India. This comprehensive law emphasizes the need for explicit consent, robust compliance measures, and significant penalties for non-compliance. Recently, a pan
Overview of Incident Response
Incident response is a critical aspect of any organization's cybersecurity strategy. When a security incident occurs, it is crucial to have a well-defined plan in place to handle the situation effectively. This blog po
As technological advances create business opportunities for businesses, they also present huge security risks of information of the same businesses. According to the U.K. government’s Cybersecurity Breaches Survey 2019, 32% of UK businesses reported
At CISO Platform Annual Summit 2017, we had a panel discussion on the topic of Best Practices In Security Procurement, including industry stalwart like K S Narayan (CISO, PWC), Gaurav Batra (Information Security Officer, Mondelez International), Gane
Can I Get a Witness? Technical Witness Bootcamp (RSA Conference 2017)
As the stakes rise in data breach litigation, more and more information security professionals will be called upon to testify on behalf of their organization. This boot camp will te
A sandbox is a security mechanism to analyze the behaviour of any suspicious file types and web objects by allowing it to execute in an isolated environment with constrained resources. It allows one to execute any untested, un-trusted/outsourced code
The intent of using IT Governance Risk Compliance (IT GRC) tools and capabilities is to report and manage IT Risks. We will study the critical platform capabilities for IT GRC Tools.
Critical Platform Capabilities In IT GRC Solution
