RFP Essentials for Account Takeover Fraud Solutions: A Procurement Guide

The digital landscape is currently witnessing an industrialization of fraud. Legacy defenses, once considered standard, are now struggling to keep pace with sophisticated attackers who operate with the speed of AI. For enterprises, the Request for Proposal (RFP) process is no longer just a bureaucratic hurdle. It is a critical opportunity to filter out reactive “band-aid” fixes and identify account takeover (ATO) fraud solutions that provide preemptive protection.

Can You Trust AI Code? I Built a Scanner to Find Out

Can you trust the code AI generates? In this video, we build a custom AI Security Benchmarking tool to put models like Gemini, Mistral, and GLM 4.5 to the test. Using Windsurf, OpenRouter, and Snyk, we automate a pipeline that prompts multiple LLMs to write an application, then immediately scans the output for security vulnerabilities.

Monitoring for Law Firms: Data Security & Ethics Guide

Law firms don’t monitor employees because they’re “worried about productivity.” They monitor because one mistake can expose privileged matter files, trigger breach notifications, derail litigation strategy, and permanently damage client trust, especially in a hybrid work model. External attackers are still a threat.

Target Higher Education: Major University Data Breaches in 2025

In 2025, universities in the United States and Australia found themselves squarely in the crosshairs of persistent and evolving cyber threats. Higher education institutions manage highly sensitive personal information, financial details, healthcare records, and research data, making them prime targets for sophisticated attackers, ransomware gangs, and even hacktivists. As cybercrime escalates globally, the education sector is facing some of its most disruptive and consequential breaches in years.

Remote work security: the complete guide to securing the digital workspace

Remote work security depends on protecting identities, devices, and data across distributed environments. Organizations must secure home networks, encrypt endpoints, enforce strong authentication, and reduce credential risk. Applying Zero Trust principles, limiting standing privileges, monitoring endpoint activity, and maintaining visibility into access and data movement helps reduce attack surface, contain threats faster, and support compliance in remote and hybrid work models.

A 101 Guide to Web Application Security

Web application security is the prevention and protection of web applications through protocols and processes implemented to ensure a cyber threat and vulnerability-free web environment. Modern applications need to handle sensitive customer data, financial transactions, and proprietary business data, as most of the world has transitioned to digital business. As a result, these systems have been prime targets for various attackers seeking to exfiltrate data, disable services, or gain access to the systems.

Why Network Security Blind Spots Persist and How Behavior Monitoring Fixes Them

You are counting on lots of security measures to keep your network safe. The truth is that these measures can still have secret passages that bad people can use to sneak around without being noticed. You can have things like firewalls and special software, on your computers to watch for problems and still not catch people moving around inside your network taking data slowly or doing weird things that are not supposed to happen because these things do not always look like the problems you are expecting.

Why Hospitals Pay Ransom to Hackers

Targets in western countries are picked with care, since hospitals and critical services face lives at risk and heavy legal fallout after breaches. When attackers weigh up ransom against long court battles and recovery costs, payment becomes the path many victims choose, feeding the growth of cybercrime. ⸻ For more information about us or if you have any questions you would like us to discuss email podcast@razorthorn.com. We give our clients a personalised, integrated approach to information security, driven by our belief in quality and discretion..

The Credential Stuffing Fix: Stop Bot Attacks Without Frustrating Real Users

Login abuse is one of the common types of cyberattacks. It happens quietly, often showing up as a spike in failed sign-ins or customers locked out of their accounts. On the surface, these events look routine. In reality, they are usually early signs of automated attacks targeting login systems. This pattern is commonly known as credential stuffing. In this method, attackers use automation to test large volumes of stolen usernames and passwords across multiple services.