Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Ep. 50 - Inside Trump's 2026 Cyber Strategy: Why "Check-the-Box Security" Is Dead

The U.S. just made its boldest cybersecurity move in decades. In this episode of the Cyber Resilience Brief, we break down President Trump’s 2026 Cyber Strategy—and why it signals a massive shift from reactive defense to proactive, offensive cybersecurity. What does this mean for CISOs, security leaders, and the private sector? We unpack the strategy’s most critical pillars, including: This isn’t regulation—it’s a call to action. And for organizations that fail to continuously validate their defenses, the risks have never been higher.

Is Wix Secure Enough? Understanding the Next Layer of Protection for Growing Websites

You click “Publish” on your Wix site and breathe easy. HTTPS? Check. Automatic updates? Check. Hosting handled? Check. Your website feels bulletproof. But here is the catch: security is not static and neither is your website. Every new feature, integration, and user interaction opens a door, sometimes one you didn’t even know existed. Hackers are constantly scanning, probing, and testing sites like yours. They don’t care if you are small; they care only about finding a weak spot.

The CEO Who Handled a Cyber Crisis Perfectly

A banking incident early in one career showed what good leadership looks like, with senior executives handing over a credit card, arranging food, hotel rooms and proper shift rotations. Instead of demanding updates every five minutes, leadership shielded the team from pressure, supported rest cycles and focused on helping the business survive. ⸻ For more information about us or if you have any questions you would like us to discuss email podcast@razorthorn.com. We give our clients a personalised, integrated approach to information security, driven by our belief in quality and discretion..

Missing one person could shut down everything #BusinessRisk #Vulnerable

One exercise killed off the leader on paper and left the management team to run the organisation without that decision maker or access to key mandates. The scenario exposed hidden dependencies, legal bottlenecks and fragile processes, and forced everyone to map where single points of failure threaten both business and incident response. ⸻ For more information about us or if you have any questions you would like us to discuss email podcast@razorthorn.com. We give our clients a personalised, integrated approach to information security, driven by our belief in quality and discretion..

Is Your Jira Instance Quietly Becoming a Data Liability?

Jira silently accumulates PII, credentials, and sensitive data through everyday team use. Security and compliance teams can detect and remediate this exposure using miniOrange's DLP PII Scanner, which scans historical and real-time content without disrupting workflows. There's a moment every security or compliance professional dreads. It's not a dramatic breach. It's quieter than that.

Workforce Identity and Access Management (IAM) for Remote and Hybrid Workforces

Remote and hybrid operating models have fundamentally changed how enterprises secure users, systems, and data. In 2026, the "workplace" is no longer limited to a traditional corporate office setup; it is a distributed ecosystem of home offices, transit hubs, and cloud-native applications. Workforce Identity and Access Management (IAM) has therefore evolved from an IT convenience into a primary security control governing how modern organizations operate safely at scale.

Joiners, Movers, and Leavers (JML): What It Is, & Why It Matters

Modern organizations frequently onboard new employees, manage internal role changes, and handle departures across multiple business applications. Without a structured identity lifecycle, access requests become manual, inconsistent, and difficult to track. This directly affects security, operational efficiency, and audit readiness. A defined JML process in IAM ensures that the right users receive the right access at the right time while reducing administrative overhead.

Synthetic Data for AI: 5 Reasons It Fails in Production

Synthetic data for AI development has become the default shortcut for most engineering teams. It’s fast, sidesteps privacy headaches, and lets you move without touching production. I get why teams default to it. But there’s a problem: synthetic data for AI routinely breaks down the moment your system hits real-world enterprise data. The system demos great. It passes every internal test. Then it lands in production and falls apart in ways you didn’t see coming.

AI Guardrails: The Layer Between Your Model and a Mistake

An AI guardrail failure doesn’t come with a warning. One minute, a response goes out. Next minute, it’s a screenshot in the wrong hands, and the question isn’t how it happened. It’s why nobody had defined what the model was allowed to do in the first place. Most teams never asked what the model was actually permitted to do. Deployment happens fast. AI data privacy and leakage prevention aren’t configuration tasks.

What Is Format-Preserving Encryption (FPE)?

Your database stores a credit card number: 4532 1234 5678 9010. You encrypt it for security. Now it looks like this: %Xk92@!mQz#Lp&7. Problem. Your payment system can’t process that. It expects a 16-digit number. Your billing software breaks. Your downstream analytics fail. Your whole pipeline comes to a halt. This is the exact problem that format-preserving encryption was built to solve.