Five Security Pros Dedicated to Protecting Critical Infrastructure
Here are five people who are taking the lead in making critical infrastructure more resilient in the face of nation-state attacks.
Latest
The SaaS-pocalypse Paradox: What it Means for CISOs and Enterprise Security
The SaaS market has shed $1 trillion in value. Salesforce, Workday, Adobe, and Snowflake are all down at least 40% from 2025 peaks. For CISOs managing risk across a consolidating software stack, the implications for vendor stability, integration continuity, and contract leverage are significant.
Graphalgo: North Korean Rock Salt in the Wound of Today's Cybersecurity Job Market
Lazarus-linked threat actors exploit fake recruiter campaigns in an operation ReversingLabs calls “graphalgo,” turning technical job interviews into remote access trojan (RAT) delivery mechanisms that target developers.
Five Security Pros Dedicated to the Mental Health of Cyber Defenders
Mental health tools for cybersecurity practitioners have become essential in this age of accelerating cyber warfare. Here are five people who are building those tools.
White House Readies Five-Page Cybersecurity Strategy Built on Offense, Deterrence, and Deregulation
The forthcoming plan marks a sharp pivot from the Biden era—and some experts warn it may leave the nation more exposed, not less.
From Notepad++ to Epoch Theory: Why Old Assumptions Are Failing Security Teams
Also: practitioners pushing the community forward, how automation is reshaping defense, and the need for clearer thinking in an increasingly noisy security landscape.
Doing Cool Stuff with Dr. Dustin Sachs
Dr. Dustin Sachs on why he started Psybercog Labs and how he believes it will help combat burnout and improve the mental health of cyber defenders.
Six Months of Silence: How a Hijacked Text Editor Exploited Structural Flaws in Enterprise Security
The Notepad++ incident isn't just another nation-state compromise. This attack highlights how developer tools are a governance blind spot, ongoing weaknesses in the integrity of update mechanisms, and the continued evolution of supply chain attacks.
A New #FollowFriday List for the Cybersecurity Community
After years of hiatus, my weekly #FollowFriday list is back. There's no better home for it than CYBR.SEC.Media, because we are building a community.
Epoch Theory and the Future of Vulnerability Management
Epoch Theory is Jeremiah Grossman’s framework for understanding how cybersecurity evolves in distinct phases driven by attacker behavior, not defensive intention.
From the Editor: A Refuge from the Sloppocalypse
Part of our mission is to be a safe house where cyber travelers can find truth and reason.