\\ Weekly Brief

In 2020, Stradis Healthcare was supplying medical packaging at a time when getting personal protective equipment where it needed to go was critical. Then its shipping operations were disrupted. The problem wasn't ransomware or a sophisticated attack from overseas. It came from access created by someone the company had legitimately trusted. Christopher Dobbins, Stradis' former vice president of finance, had administrator access to systems containing the company's shipping info

Most businesses know what physical assets they own. But do they know which digital assets they depend on—and who actually controls them?

Weekly Brief | Week of September 21, 2026 The recent stories about AI systems breaking into real companies sound like the beginning of a new era of cyberattacks. But the AI systems used familiar attack techniques, and that is what should concern business leaders most. Google's Gemini reached real companies through password guessing and credentials exposed in public repositories. Anthropic has disclosed incidents involving exposed credentials, SQL injection, and security syste

Effective cybersecurity requires more than owning security products. It requires knowing what matters, knowing how to protect it, and continuously managing and validating those protections as the business changes.

Cybersecurity should not be applied uniformly to every user, system, or environment. The level of protection should reflect the business value, exposure, and consequences associated with the risk.

Connected devices can expose far more than their primary function suggests. The relevant question is not whether a device is inherently dangerous, but what it reveals, what it can reach, and how its risk changes with the environment around it.

1. Engage in Safe Online Shopping If you plan on online shopping during the holidays, consider creating a free email address for...

Do you believe Cyber-Security is only attainable by large organizations? Nope - Market Leading End-Point-Detection and Response is now...

Orion has published a networking monitoring tool with fixes for four security vulnerabilities, counting two weaknesses that could be...

Microsoft Exchange On Tuesday, March 2, 2021, Microsoft released patches for very serious Remote Code Execution (RCE) vulnerabilities,...

Chinese APT Group Hafnium has not only gained persistent system access into files and mailboxes, but also to credentials stored on...

Microsoft Exchange Zero-Day Vulnerability: 30,000 servers already hit - request mitigation assistance now! Microsoft has warned that...

2020: Zoombombing, fraud, data breaches, Solarwinds. Is your organization prepared?