GrayZone Platform

BlueVoyant analyzed a sophisticated and extensive campaign that leverages corporate shell companies, professional infrastructure, and code-signing certificates to distribute potentially unwanted applications (PUAs). This operation has established a persistent, platform-like foothold on user systems through software that presents a façade of corporate legitimacy. It combines continuous system access with ongoing data collection.

Your Cyber Resilience Strategy for Unknown Threats

Global cyber attacks increased by approximately 38% in 2025, with organisations experiencing an average of over 1,900 attacks per week. To thrive and survive in this dynamic environment, businesses must move beyond mere security and embrace a holistic strategy of cyber resilience.

EP25 - Identity is the attack vector w/ Udi Mokady

CyberArk founder and executive chairman Udi Mokady returns to Security Matters at a transformational moment—now as part of Palo Alto Networks, following the acquisition’s close on February 11. In this far‑reaching conversation, Udi and host David Puner explore why identity has become the attack vector for modern enterprises, driven by an unprecedented surge in human, machine and AI‑powered identities that attackers increasingly exploit.

How Companies Can Protect Against Third-Party Risk in 2026

As organizations move deeper into cloud ecosystems, automation, AI integrations, and global supply chains, one truth becomes increasingly clear: In 2026, third-party risk is not just an IT concern. It is a business continuity concern, a regulatory concern, and in many industries, a board-level concern. From software vendors and cloud providers to managed services, payment processors, contractors, and niche business tools, every external connection introduces potential exposure.

Ep. 46 - Blueprint Thieves: Inside Iran's Industrial Espionage Machine

In this episode of _The Cyber Resilience Brief_, we break down the modern reality of *Iranian cyber warfare and industrial espionage*. Host Tova Dvorin and offensive security engineer Adrian Culley analyze the tactics, techniques, and procedures (TTPs) of *APT33, OilRig (APT34), and MuddyWater* — three of the most active Iranian state-sponsored threat actors targeting *energy, aviation, manufacturing, government, and critical infrastructure*.

Complete Guide to Understanding CMMC Compliance

Cybersecurity requirements for companies in the defense supply chain have entered a decisive enforcement phase. The Department of Defense has moved beyond self-attestation and toward verifiable, contract-bound cybersecurity standards. The Cybersecurity Maturity Model Certification (CMMC), now plays a central role in determining which organizations are eligible to work with the DoD. CMMC establishes three compliance levels, each tied directly to the sensitivity of the data an organization handles.

LevelBlue Named a Representative Vendor in 2026 Gartner Market Guide for Outsourced Managed Security Services

LevelBlue is proud to announce it has been named a Representative Vendor in the just-released 2026 Gartner Market Guide for Outsourced Managed Security Services (OMSS). OMSS, which is a subset of Managed Security Services, provides organizations with specialized external expertise and operational support for critical cybersecurity functions.

150+ FAKE law firm websites found in AI cloning scam #cybersecurity #ai #podcast

In this week's Intel Chat, Christopher Luft and Matt Bromiley discuss how attackers used AI to clone over 150 law firm websites, targeting fraud victims under the guise of offering legal assistance to recover lost funds. Chris points out how easy this has become with AI tools. Attackers can quickly clone a website, host it at a legitimate-looking domain, and start harvesting information. The episode also covers Russian cyber operations targeting the defense industrial base, Team PCP's campaign compromising 60,000+ servers, and exposed OLAMA AI infrastructure.

Who Controls LLMs? Digital Sovereignty, Policy, and AI Security Risks | India AI Impact Summit 2026

AI agents are quickly becoming first-class actors in the digital ecosystem—logging into systems, invoking multiple APIs, collaborating, and even interacting socially with other agents. In a panel discussion on “Enhancing Cyber Resilience Across the Digital Ecosystem”, the miniOrange Founder & CEO Mr. Anirban Mukherji highlighted why digital identity is now the foundation for securing agent-driven environments, especially as authentication and authorization protocols expand globally across platforms and enterprises.