Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Tackling the Modern WAF Challenge: Why Managed WAAP Is the Key to Effective Application Security

Organizations today face a continuous struggle to secure their web applications against threats that constantly evolve in the fast-paced digital landscape. The Web Application Firewall (WAF) serves as a primary line of defense against these threats; however, its management challenges often outweigh its security benefits, resulting in organizations not realizing the full value of their security investment.

EP 17 - Privilege creep and the machine identity surge: Securing the modern enterprise

The conversation explores the dangers of privilege creep, the explosion of machine identities, and why accountability at every point of interaction is essential for building resilient teams and systems. Chris shares insights on the risks of unmanaged access, the impact of AI and automation on both defense and attack strategies, and practical advice for CISOs and boards on managing identity risk while enabling business transformation..

Anatomy of a Modern Threat: Deconstructing the Figma MCP Vulnerability

Threat researchers recently disclosed a severe vulnerability in a Figma Model Context Protocol (MCP) server, as reported by The Hacker News. While the specific patch is important, the discovery itself serves as a critical wake-up call for every organization rushing to adopt AI. This incident provides a blueprint for a new class of attacks that target the very infrastructure powering the AI Agent Economy. To understand the risk, we must first look at the mechanics of this emerging threat.

Regulatory Frameworks Affecting AI and Data Privacy Explained

AI is now embedded in everyday operations across support, finance, healthcare, and the public sector. As models touch more sensitive data, the legal landscape is moving just as quickly. The center of gravity has shifted from annual checklists to continuous compliance in production. This guide explains the regulatory frameworks affecting AI and data privacy in 2025, how they fit together, and how to turn their requirements into practical, repeatable controls your teams can run every day.

EP 17 - Privilege creep and the machine identity surge: Securing the modern enterprise

In this episode of Security Matters, Chris Schueler, CEO of Cyderes, joins host David Puner for a dive into the evolving challenges of enterprise security. The conversation explores the dangers of privilege creep, the explosion of machine identities, and why accountability at every point of interaction is essential for building resilient teams and systems.

Top 7 Online Penetration Testing Tools in 2025

Online penetration testing is a proactive cybersecurity practice that aims to identify vulnerabilities in your web app, network, mobile application, or infrastructure. Think of it as your digital security guardian scrutinizing your defenses by stimulating real cyber intrusions remotely. Before we get into the debate of which online penetration testing tool is the best for you, want to see the power of online penetration testing in action? Try our free website scanner!

The Top 5 File Activity Monitoring Tools in 2025

Organizations must maintain control over sensitive data and prevent unauthorized access or file modifications. File activity monitoring software gives organizations the visibility and control they need to mitigate the risks of data breaches, insider threats, and compliance violations. These solutions provide valuable insights into who is accessing files, their actions, and when these activities are taking place.