Data Security When GPS Turns a Blind Eye: A Disturbing Read for Saturday, 21st June 2025 Too much all-seeing.
Internal threats in open-source software Unusual Appetites, Close to the Edge, The Exploitation of Innocence, Getting Fooled Again, Hard Lessons, Discordant Games, and Mischief Regenerated. It's CISO Intelligence for Friday, 6th June 2025. An unexpected twist in the tale, when trouble is far too close for comfort, naivety is a very human trait, getting caught by old-school deception, learning painful lessons, a merry but painful dance, and foes not dead: just sleeping.
Incident Response and Endpoint Security Capeless Crusaders, Super Hero Face-Offs, Epic Fails, White Hat Wins, Unearned Privileges, and Chain Breaks. It's CISO Intelligence for Friday 23rd May 2025. Not all heroes wear costumes, tying down a titan, paper-thin security promises, teamwork gets results, simple isn't always good, and when shoring up defenses is a high-priority exercise.
Supply Chain Security Imitation Games, Hidden Figures, Open Access, The Malevolent Tales Mill, Securing Cloud Security, and Taking Pen Testing Seriously. It's CISO Intelligence for Friday 16th May 2025. "Who are you?" - a new level of mimicry, real invisibility cloaking, giving it all away, damn lies and viral content, fortifying cloud structure, and making more than the right noises.
Identity and Access Management (IAM) "Neither Flesh Nor Blood," Hard Code: Soft Entry, Strange Bills, Passive Password Protection, Cyber Shields Up, and Harvest for the Trackers. It's CISO Intelligence for Friday 11th April 2025. An existential dilemma? Weak defenses, unaccounted expenses, passwords under siege, pro-action before reaction, and sometimes it feels like somebody's watching...
Application Security Boring But Necessary Protection, Beware the Digital Marketplace, RedCurl is Branching Out, Teaming Up on Tracking, Major Players Making Major Moves, and Gaps in the Grids. It's CISO Intelligence for Friday 28th March 2025. Needs must when the devil drives, all that glitters is not legitimate, new skills aren't always a good thing, doubling up on protection muscle, the big guns are stepping up, and when more than solar power is shining in.
Application Security What's Up, WhatsApp? Click Profit Kneecapped, Signal's Unwelcome Sign On, Hidden Depths, Cyber Chicken Little, and Inside Out. It's CISO Intelligence for Friday 21st March 2025. The great WhatsApp reveal, FTC 1:Click Profit sideshow 0, the breached Signal fortress, damage is sometimes more than monetary, when the security system employs the shepherd's deception, and those pesky human trojans.
Data Privacy Unmasking the Masked: The YouTube Privacy Snafu. The CISO Intelligence "Sharp Intake of Breath" Read for Saturday 15th February 2025. A close shave!
Endpoint Security Group Policies Breached, Hissy Fitting Hackers, Digital Threat Detectives Hard at Work, Cancer Care Sabotage, India's Banking "Safe Space", and Zombie Malware? It's CISO Intelligence for Monday 10th February 2025. The "one policy" format has become somewhat less precious, the black hats are pouting, cyber sleuthing is now a full-time job, cancer doesn't take a break when NHS systems are breached, India has ramped up its banking protections, and proud malware bandits?
Cybercrime Disruption HeartSender Wipeout, Lazarus Keeps Rising, AI is Now a Must-Have, Tata Breached, Flooding the Unicode Zone, and Look-No Hands! It's CISO Intelligence for Wednesday 5th February 2025! In today's edition: one less criminal market, Lazarus is scaling up, AI has become the cybersecurity tool of choice, you're never too big to fail, a new kind of changeling, and is encryption really as secure as we think?
System Vulnerability MS's Cracked Windows, Patching up Oracle, A Chip in a Cornerstone, AI: The Great Automater, The Exit Bag Check, and Digital Alarm Bells Ringing in the Car Industry. It's CISO Intelligence for Monday 27th January 2025. Today's topics: hackers using the "sneak in/change account access/run rampant" technique, Oracle creating a veritable quilt to cover its flaws, issues with Apache's building blocks, AI easing the analyst's load, making sure leavers exit empty-handed, and a bumpy road trip into cybersecurity.
Malware Prevention Multi-Purpose Malware, Reinforcing Government Sector Cybersecurity, Dangerous Carcasses, Understanding Network Architecture, the Programmes Steering the Ship, and Keeping Eyes on the TPRM Cycle. It's CISO Intelligence for Tuesday 14th January 2025! Today’s topics: FireScam - the slick new malware on the block, public sector institutions fighting increasing cyber threats, sniffing out a finance scam, how understanding your network infrastructure is an imperative, innocuous is not the same as risk-free, and lifecycles don't only apply in nature.