How Good Communication Can Improve Cybersecurity Awareness

Cybersecurity is often seen as a technical challenge filled with complex code and firewalls. Many organizations focus only on the software side of protection. Real safety comes from the people using the systems every day. When teams talk clearly about risks, they create a stronger shield against digital threats.

How Employee Recognition Programs Strengthen Cybersecurity Culture in the Workplace

Most security incidents do not begin with a brilliant hacker. They begin with a normal employee having a normal day and making a normal decision. If we want stronger cybersecurity, we have to focus on shaping those everyday decisions. According to the 2025 Data Breach Investigations Report highlighted by DeepStrike, the human element is involved in roughly 60% of breaches. That number matters because it means your biggest risk is also your biggest opportunity. The same people who click can also protect.

Scammers Only Need 30 Seconds of Video to Clone You

Training a convincing voice model now needs as little as thirty seconds of audio, which public videos, podcasts and recorded calls provide in abundance. Open profiles reveal who reports to whom, so attackers can pair cloned voices with organisational charts and pressure staff into authorising payments or sharing access. ⸻ For more information about us or if you have any questions you would like us to discuss email podcast@razorthorn.com. We give our clients a personalised, integrated approach to information security, driven by our belief in quality and discretion..

Received Someone Else's Confidential Email? Here's What To Do.

When we think about misdirected email, we often put ourselves in the shoes of the sender. After all, nobody wants to tell their manager that they might (however accidentally) be responsible for a data breach. But what you do when you’re on the other side of the inbox?

Multiple Authenticated High and Critical Vulnerabilities in Veeam Backup & Replication

On March 12, 2026, Veeam released fixes for multiple high and critical severity vulnerabilities in their Backup & Replication product that could allow remote code execution (RCE), privilege escalation, and credential theft. Arctic Wolf has not identified publicly available proof-of-concept exploits for these vulnerabilities, nor have we observed any exploitation.

Why Soft Guardrails Get Us Hacked: The Case for Hard Boundaries in Agentic AI

One recurring theme in my research and writing on agentic AI security has been the distinction between soft guardrails and hard boundaries. As someone who serves on the Distinguished Review Board for the OWASP Agentic Top 10, and who spends every day thinking about how to secure agents across enterprise environments at Zenity, this distinction is not academic. It is potentially the single most important conceptual framework practitioners need to internalize right now.

Exploring Shopify Customer Accounts & Enhancing Security with miniOrange

Shopify's recent update introduces advanced extensibility features for Shopify customer accounts, significantly enhancing both Direct-to-Consumer (DTC) and Business-to-Business (B2B) customer accounts. This update allows for more seamless and customizable customer interactions, boosting satisfaction and operational efficiency for both types of customers. Shopify has revealed that developers can now access customer accounts using customer account UI extensions, which are currently in developer preview.