Total Cost of Ownership (TCO) for Cyber Risk Quantification

While the average costs of cyber events rise, so do cybersecurity budgets, albeit at an extremely minimal level. This fiscal reality, which will only become more pressing as organizations scale their cyber GRC programs according to the external risk landscape, has made it all the more critical for chief information security officers (CISOs) and other security and risk managers (SRMs) to be able to evaluate the ROI of the various solutions and initiatives they implement.

Using Honeyfiles to detect adversaries and infostealers with Zane Gittins

Defender Fridays - Using Honeyfiles to Detect Adversaries with Zane Gittins Join us for this week's Defender Fridays as we explore using honeyfiles to detect adversaries and infostealers with Zane Gittins, IT Security Manager at Meissner Filtration Products. At Defender Fridays, we delve into the dynamic world of information security, exploring its defensive side with seasoned professionals from across the industry. Our aim is simple yet ambitious: to foster a collaborative space where ideas flow freely, experiences are shared, and knowledge expands.

Top 13 Web Application Penetration Testing Tools

Web application penetration testing refers to a security assessment process where ethical hackers simulate real-world attacks on a web application to identify vulnerabilities, exploit weaknesses, and provide actionable insights to enhance security posture. But, with a continuously evolving landscape and an ocean of vendors, how do you choose the best web pentest tool for your company and security needs?

Protect Yourself From Voice Phishing Attacks Targeting Salesforce Instances

Google’s Mandiant has published guidance on defending against an ongoing wave of social engineering attacks targeting organizations’ Salesforce instances. The organized criminal gang tracked by Google as “UNC6040” has been using voice phishing attacks to trick employees into granting access.

How to Migrate VMware VMs to Nutanix

Nutanix is a hyper-converged virtualization platform for running virtual machines. It can be used as an additional infrastructure or an alternative to VMware vSphere and Microsoft Hyper-V.For more information, you can read this VMware vs Nutanix comparison. You can migrate VMware virtual machines (VMs) from ESXi hosts and clusters to a Nutanix cluster. Read this VMware to Nutanix migration guide to learn how to configure the migration properly.

17 Most Popular Penetration Testing Tools in 2025

With the global cost of cybercrimes estimated to reach 9.2 trillion in 2024, which is Japan’s GDP doubled, it is more critical now than ever to mitigate threats posed by attackers. As a business owner or security analyst, how can you mitigate such threats? While hundreds of penetration testing tools promise complete cybersecurity solutions for enterprises and analysts, finding the perfect match that suits your needs can be like looking for a needle in a haystack.

We Need to Teach Our AIs to Securely Code

I have been writing about the need to better train our programmers in secure coding practices for decades, most recently here and here. At least a third of data compromises involved exploited software and firmware vulnerabilities and we are on our way to having over 47,000 separate, publicly known vulnerabilities this year. There are at least 130 new vulnerabilities learned and publicly reported every day, day after day. That is a lot of exploitation. That is a lot of patching.

How AI is Transforming Application Security Testing

AI is revolutionizing software development, enabling teams to build and ship faster than ever. But this speed introduces new risks at an unprecedented scale. Your current application security testing program must evolve to keep pace. For security leaders, the challenge is clear: how do you secure applications without slowing down innovation? This article provides a practical analysis of how artificial intelligence is fundamentally transforming application security testing (AppSec).

Cybersecurity, Cyber Recovery and the Fight Against AI

Cybersecurity has always been a high-stakes game of cat and mouse. Defenders build taller walls, and attackers find longer ladders. But with the rapid rise of artificial intelligence (AI), the very nature of this conflict is changing. AI is no longer just a tool for defenders; it’s being weaponized by cybercriminals to automate and scale attacks with unprecedented speed and sophistication.

CyberArk named a Leader in the 2025 Gartner Magic Quadrant for PAM

It’s one thing to excel. It’s another to consistently redefine the path forward. We’re proud to announce that CyberArk has been named a Leader in the 2025 Gartner Magic Quadrant for Privileged Access Management (PAM) for the seventh consecutive time. In the latest report, CyberArk is positioned furthest for Completeness of Vision—a placement that, in our view, further reinforces our position as a forward-thinking vendor shaping the future of privilege.