Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

An internal auditor from Boerse Stuttgart Digital explains how a Fireblocks-hosted pooled audit helped meet DORA's third-party ICT requirements. Instead of every customer auditing Fireblocks one by one, the pooled audit community joined forces on a single common audit: shared scope, shared evidence, shared result. In this conversation, the pooled audit coordinator walks through how the community set the scope, why a pooled audit covers customer-specific requirements that a standard SOC 2 might miss, and how Fireblocks supported the process with subject matter experts, documentation, and on-site coordination.

How do security leaders separate legitimate AI security concerns from fear, uncertainty, and doubt? In this clip, Rik Ferguson explains why today's warnings about autonomous threats are different from past predictions. The evidence is already being documented, tested, and observed across the cybersecurity industry, making this a present challenge rather than a future possibility.

InfoSec conference speakers should give cybersecurity professionals a clear reason to invest their time in attending. The decision to book Formula 1 driver Nico Hülkenberg for InfoSec Europe raises an interesting question about whether celebrity keynote speakers deliver more value than experienced industry practitioners.

CVE of the day - CVE-2026-75931.

For more than a decade, security strategies have been shaped by the principle of "assume breach." But what if the next evolution of cybersecurity requires a different assumption? In this clip, Rik Ferguson discusses why organizations should begin building and testing security architectures based on the expectation that attackers will increasingly be autonomous and non-human, and why defenses must evolve accordingly.

Cybersecurity conference costs reach another level when an exhibition stand gets pitched as only £20,000. For cybersecurity vendors considering major industry events, the price raises a rather important question about what they receive in return for the investment.

CVE of the day - CVE-2026-75975.

Cybersecurity conferences lose their value when the same vendor-led conversations keep repeating themselves. Community events such as BSides, Hack Glasgow and SteelCon offer a different model, where sponsors build credibility by supporting the community rather than throwing sales material at attendees.

CVE of the day - CVE-2026-76172.

AI marketing is everywhere in cybersecurity, but adding AI to a product description does not explain what the technology does. Vendors need to move beyond claims such as AI-enabled and AI-powered and have deeper conversations about the technology behind their products.