The Definitive Guide to ISO 42001
Understanding ISO 42001 ISO/IEC 42001 is the world’s first international standard for establishing, implementing, maintaining, and continually improving an...
Analytics & Intelligence
AI SOC Anxiety: Does More Control Equal More Complexity?
There’s a weird tension in the security community right now (OK, we admit it. Weird tension in security is...
Guardrails Make AI-Assisted Development Safer By Design
AI coding assistants are rapidly becoming part of everyday software development. From generating boilerplate code to suggesting entire dependency...
Widely Used Malicious Extensions Steal ChatGPT, DeepSeek Conversations
Two malicious extensions made to look like a legitimate tool and installed more than 900,000 times were used by...
Why Venture Capital Is Betting Against Traditional SIEMs
And why most of the arguments do not hold up under scrutiny Over the past 18 to 24 months,...
The Hidden Cost of “AI on Every Alert” (And How to Fix It)
Every SOC leader is hearing the same promise right now: “Drop an AI agent on every alert and watch...
Don’t Use a Ruler to Measure Wind Speed: Establishing a Standard for Competitive Solutions Testing
Competitive testing is a business-critical function for financial institutions seeking the ideal solutions provider to help optimize their risk...
OpenAI’s ChatGPT Atlas: What It Means for Cybersecurity and Privacy
In this episode, we explore OpenAI’s groundbreaking release GPT Atlas, the AI-powered browser that remembers your activities and acts...
US Defense Contractor Boss Sold Zero Days to Russia — Cops a Plea
Peter Williams admits to selling unpatched iPhone bugs to a shady Russian broker.The former head of L3Harris’s Trenchant “offensive cyber”...
From Path Traversal to Supply Chain Compromise: Breaking MCP Server Hosting
TL;DR We discovered a vulnerability in a popular MCP server hosting service that compromised thousands of AI servers and...
5 SOC Problems Morpheus Solves (That Legacy Tools Can’t)
You bought tools to solve problems. Now the tools are the problem. Morpheus is an autonomous SOC solution that sits...
OAuth for MCP – Emerging Enterprise Patterns for Agent Authorization
By Thomas Segura TL;DR: OAuth 2.1 is a solid foundation for MCP, but the non-deterministic nature of agent interactions introduce...
SIEM, Startups, and the Myth (Reality?) of IT Inertia: A Reformed Analyst Reflects on SIEM MQ 2025
Vaguely magical and quadranty thing (Gemini) It’s not every day you get to reflect on a journey that started as an...
From Generic Code to Specialist AI: How MCP Will Reshape the Developer Experience
One of the challenges with using AI and LLMs to generate code today is that they mostly produce generic code....
The LLM Dependency Trap
Large language models are reshaping how we write software. With a few prompts, developers can generate boilerplate, integrate dependencies, write...
