Ep. 51 - 2026 Cyber War Update: Handala, MuddyWater, and the Rise of Destructive Attacks

Iranian cyber attacks are escalating—shifting from espionage to destructive, large-scale operations. In this episode, we break down what CISOs need to know. Host Tova Dvorin and offensive security expert Adrian Culley analyze the latest Iranian cyber threat activity, including groups like Handala (Void Manticore) and MuddyWater (Mango Sandstorm), and how their tactics are evolving.

How Charlotte AI AgentWorks Fuels Security's Agentic Ecosystem

The era of human-speed defense is over. With eCrime breakout times collapsing to as fast as 27 seconds and attacks from AI-powered adversaries increasing 89% year-over-year, the traditional SOC has reached a breaking point. Manual processes, fragmented tools, and rule-based playbooks were built for a different era. Today, if your defense depends on human reaction time, you’re not just behind — you’re at risk.

Advanced Certificate Manager: Essential TLS Control for Regulated Industries

Get full, granular TLS control with Cloudflare Advanced Certificate Manager (ACM). While every Cloudflare account includes free basic TLS, complex and highly-regulated businesses, like technology, financial services, or healthcare, need more granular control, and ACM eliminates the manual overhead of managing certificates. Key Features Include: Helpful Links & Resources.

Why Your Human Risk Management Strategy Can't Ignore AI

AI isn’t just another technology wave—it’s a force multiplier for both innovation and risk. In a recent webinar featuring insights from Bryan Palma and guest speaker Jinan Budge, Vice President and Research Director at Forrester, one message came through clearly: the rise of AI and AI agents is fundamentally reshaping the human risk landscape—and security leaders need to move fast to keep up.

GDPR Compliance Automation: What Can and Cannot Be Automated on Websites

Consent management platforms were a reasonable first answer to GDPR. Capture the choice, log it, and move on. For a while, that felt like compliance. It wasn’t. A logged preference and an enforced preference are two different things. When a user clicks reject all, the legal obligation isn’t just to record that click, but it’s also to ensure no tracking script executes after that. Tags, pixels, analytics calls, behavioral trackers, they all need to stop.

Cybersecurity Is Now an HR Issue, Not Just an IT Problem

As organizations become more digitally dependent, the traditional divide between cybersecurity and human resources is quietly dissolving. Cyber risk is no longer confined to firewalls and infrastructure, it lives in behavior, communication, hiring, and culture. The companies that recognize this shift are the ones building true resilience. Below are four expert perspectives that reveal how cybersecurity and HR are increasingly intertwined.

Why a strategic MVP is needed for scalable software

Minimum Viable Product is the exact opposite of MVP in sports, the Most Valuable Player. One danger is to treat it as the latter by over-investing time and resources into it, missing the point that it's about validating the business idea and core value proposition. But, many also go too far the other way and under-bake the features, treat the core code as disposable, and end up later building the real product on top of a mistreated foundation with technical debt.