Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

The Five Eyes just put a number on something most security teams haven't priced in: AI is shrinking the gap between "vulnerability" and "actively exploited" faster than patch cycles can keep up. Adrian Culley and Tova Dvorin explain why CVSS scores alone can't tell you what's actually reachable in your environment — and why attack path validation is becoming the only way to know.

Still sleeping on your AI app risk problem? Save yourself the insomnia-induced eye twitch. Without adopting a goat (you’ll understand once you watch this vid with @AlexisGay)... Vanta monitors all your vendors so you can track risky app usage. Even the AI apps that sneak past procurement. So don’t stress about who’s using AI apps and also has prod access. Just sleep well knowing you can review and approve every tool in one place.

Graylog is for lean security and IT teams who need practical detections, clear context, and predictable outcomes without the overhead of traditional SIEMs. See how Graylog helps lean teams move from noise to clarity, and why so many organizations are rethinking what effective detection really looks like.

Fireblocks Director of Policy Dea Markova joins Bloomberg to explain why institutional adoption of digital assets is already here, not on the horizon.

This week on the podcast we welcome back Ryan Estes from the WatchGuard Endpoint Security attestation team to discuss a recent deep dive analysis of NoisyS0cks. After that, we give an update on the latest trends in Ransomware targeting SMBs.

In this episode, host Richard Bejtlich sits down with Corelight Senior Sales Engineers Adam Donadeo and Nico Roosenboom to unpack their firsthand experiences at Locked Shields, the world’s largest international live-fire cyber defense exercise. The conversation dives deep into the chaotic, real-world friction of defending a massive virtualized network alongside 4,000 global experts against aggressive red team waves.

Learn how to back up a Proxmox VE VM to tape using a backup copy job, and how to recover a Proxmox VE VM directly from tape to a Proxmox host with NAKIVO Backup & Replication. Learn more.

NAS and file servers both share files over a network. So why are they built for completely different jobs?

Watch the seventh episode of CISO Global's podcast, "You've Been Owned," with host CISO Gary Perkins. In this episode, Gary sits down with Steve Quartarone, Partnerships Director at Prove.

CMMC Phase 2 enforcement lands in November 2026, and C3PAOs are already warning about assessment capacity. If your configuration management domain isn't audit-ready, this is the walkthrough to fix that. Roy Ludmir breaks down what changed in enforced CMMC as of November 2025, what auditors actually test versus what they just ask about, and where most organizations get stuck below full compliance — plus which security baselines to standardize on and how to build an evidence package that holds up under a real assessment.