Jon Oltsik: Aligning Security and IT Operations
Security researcher and analyst Jon Oltsik examines how some companies go too far with automation and capabilities, stressing the need for alignment between security and IT operations.
Security | Threat Detection | Cyberattacks | DevSecOps | Compliance
The Latest Cybersecurity News & Insights From Around The World
Why 2025 Marked a Turning Point for Exposure Management and for Nucleus
For years, the cybersecurity industry has told itself that vulnerability management has been improving. This story is centered around “more”: more scanners, more data, more dashboards. Despite this abundance, by 2025 the gap between activity and outcomes became impossible to ignore. Security teams were doing more work than ever but struggled to show that risk was actually going down.
The CEO's Take: Making Security Work
“In 2024, at least 35.5% of all data breaches originated from third-party compromises.” Join Aleksandr Yampolskiy (CEO & Co-Founder, SecurityScorecard) and Nick Schneider (President & CEO, Arctic Wolf) for this discussion on: SecurityScorecard monitors and scores over 12 million companies worldwide.
The CEO's Take: Blind Spots in the Enterprise & Ecosystem
“The best way to compromise a ‘secure organization’ was to go find the things they didn’t know about.” Vulnerability management – within both the enterprise as well as the vendor ecosystem – is largely broken. Join Aleksandr Yampolskiy and HD Moore for this webinar discussing: SecurityScorecard monitors and scores over 12 million companies worldwide.
The CISO's Take: Navigating Cyber Risk in Financial Services
“If you are solving problems at human speed, you are at a huge disadvantage, because your attackers are operating at machine speed.” As cyber risk – in both the financial services sector and more broadly – accelerates at the pace of automation and AI, securing our future requires practitioners to be more strategic than the threat actors after our assets.
SecurityScorecard CISO Steve Cobb as Cyber Santa | Cyber Santa's 2026 Predictions
The New Year is upon us and with a new year comes new changes. Cyber Santa is back with his predictions for the coming year and how cyber will evolve in the next 365 days. SecurityScorecard CISO Steve Cobb returns in his jolly red hat and white beard to shake his snow globe and see what's ahead for the cybersecurity industry in 2026 and what you need to know going into the new year. CISO responsibility, data sprawl, and AI governance are the top 3 on the list of emerging priorities.
Jon Oltsik: Shifting Left and Threat Informed Defense
Security researcher and analyst Jon Oltsik talks about the importance of shifting lift and employing threat informed defense in this short clip.
Third-Party Risk Management: Best Practices and Trends
In the quiet corners of the darknet, threat actors aren’t always looking for a way to break through your front door. Instead, they’re hunting for the “side door”—the niche cloud provider you use for analytics, the marketing firm with access to your customer data, or the logistics partner with a direct line into your ERP. As we move into 2026, Third-Party Risk Management(TPRM) has evolved from a periodic compliance exercise into a high-stakes game of digital chess.
Security Alert: CVE-2025-14847 MongoDB "MongoBleed" Actively Exploited
A high-severity vulnerability, CVE-2025-14847, affecting MongoDB Server is being actively exploited in the wild with a Bitsight Dynamic Vulnerability Exploit (DVE) score of 9.71. The flaw, commonly referred to as “MongoBleed,” is an unauthenticated memory-read vulnerability caused by improper handling of zlib-compressed network message headers, which may allow attackers to read uninitialized heap memory remotely.
NIST compliance in 2026: A complete implementation guide
Aligning with a NIST framework is a strategic initiative for any organization serious about cybersecurity. It provides a clear roadmap to defending against sophisticated supply chain attacks, meeting evolving regulatory demands, and managing growing cyber risk exposure from third-party vendors. This guide explains the core NIST frameworks and provides a practical, 5-step implementation plan for building a resilient and defensible security program with a NIST standard.