CSOonline.com reported that “Nearly three out of every five (57%) significant cyber incidents involve attacks the cybersecurity team had not prepared for, suggesting CISOs need to re-evaluate — and in some cases recommit to — their tabletop strategies.” The October 14, 2025 article entitled “CISOs must rethink the tabletop, as 57%
Continue Reading Only 57% of cyber incidents have never been rehearsed in tabletops!
CSOonline.com reported that “With CISO tenures averaging just three years, many are questioning whether relentless stress, liability, and limited rewards are making the role unsustainable.” The October 7, 2025 article entitled ” Is the CISO chair becoming a revolving door?” (https://www.csoonline.com/article/4066101/is-the-ciso-chair-becoming-a-revolving-door.html) included these comments:
CISO tenures average three
Continue Reading Are CISOs burning out faster than ever in 2025?
ComputerWorld.com reported that “The Discord user data breach offers yet another argument against the UK government’s authoritarian plans for Digital ID. A sensible government would consider the implications before forcing people to risk information with a stunt like this.” The October 9, 2025 article entitled “Major Discord hack exposes
Continue Reading Discord hack of 70,000 users exposed risks of the UK Digital ID!
DarkReading.com reported that “Showman P.T. Barnum once said, “There’s a sucker born every minute.” Had he been a cybersecurity expert, he might have changed that to say, “There’s a cybersecurity vulnerability published every 12 minutes.” He wouldn’t have been far off.” The October 2, 2025 article entitled “Despite More CVEs
Continue Reading Are you familiar with Common Vulnerabilities and Exposures (CVE) published by MITRE?
DarkReading.com reported “The Internet of Things (IoT) has made everything more interconnected, but an important US government security initiative is stuck in limbo while threat actors step up attacks on everything from medical gear to printers.” The September 29, 2025 article entitled “IoT Security Flounders Amid Churning Risk” (https://www.darkreading.com/iot/iot-security-flounders-amid-churning-risk
Continue Reading IoT continues to be a big risk for Cyberattacks!
SCWorld.com reported that “Identity drives modern cybersecurity. Every breach report and security conference echoes the same theme: companies that control identity now control access. Organizations have poured resources into managing human identities, building elaborate systems for provisioning, lifecycle management, and compliance reviews.” The September 25, 2025 article entitled “NHIs: The
Continue Reading Are you ready of Non-Human Identities (NHIs)?
SCWorld.com reported that “Security Affairs reports that OpenAI’s artificial intelligence chatbot ChatGPT has been impacted by a zero-click flaw, which could be exploited to facilitate a server-side data theft intrusion via malicious emails.” The September 19, 2025 report entitled “Novel ShadowLeak attack against ChatGPT discovered, addressed” (https://www.scworld.com/brief/novel-shadowleak-attack-against-chatgpt-discovered-addressed)
Continue Reading ChatGPT – Bad news and good news! Attack against ChatGPT discovered and addressed!
SCWorld.com reported that “A Sept. 16 report from Arctic Wolf details how threat actors have accelerated their tactics, exploiting identity and timing to bypass network defenses. The report’s primary finding: 51% of alerts issued occurred outside of business hours, with 15% of total alerts taking place on weekends. Arctic Wolf
Continue Reading 51% of security alerts occur outside of business hours!
Darkreading.com reported that “In a blog post, Microsoft said its Digital Crimes Unit used a court order granted by the Southern District of New York to seize 338 websites associated with the service. In a blog post, Microsoft described RaccoonO365 as “the fastest-growing tool used by cybercriminals to steal
Continue Reading Watch out for Phishing-as-a-Service (PhasS)!
SCWorld.com reported that “Industry researchers warn that adversarial attacks on AI models are on the rise. Unlike conventional cyberattacks, these exploits manipulate the AI itself — feeding it poisoned data, corrupting its inputs, or leveraging its built-in biases. The result can be reputational damage, regulatory penalties, or operational disruption.” The
Continue Reading Please plan for cyber threats from AI models!