Employees Aren't the Weakest Link: Jayson Street's Case for Situational Awareness
Security awareness programs fail when they expect constant vigilance. Jayson Street says organizations should teach employees when to switch out of autopilot instead.
Latest
Lying for a Living with Jayson Street
Street says stronger cybersecurity awareness comes from investing in people, improving situational awareness, and helping employees recognize when something is out of the ordinary.
Break It Before They Do: Chaos Engineering for DDoS Resilience
Learn how chaos engineering helps organizations test DDoS resilience, expose weaknesses, and improve recovery before attacks strike.
Above the Packet: Cybersecurity's New Meaning Layer
In less than two weeks, a question about software safety moved from coffee-call conversation to an OpenSSF issue, a community schema, a validator, and active alignment with CycloneDX and SPDX. That speed is interesting. The way it happened is more interesting.
Why The Cybersecurity Team Should Be The Marketers' Best Friend
Cybersecurity and marketing share the same goal: trust. Learn why closer collaboration strengthens brands and reduces risk.
GitLost Exposes Agentic AI Data Exfiltration Risks
GitLost shows how prompt injection can turn AI agents into data exfiltration tools by abusing legitimate permissions and trusted workflows.
Let's Clear The Air
This week: HOU.SEC.CON is now CYBR.SEC.CON, Cyber Sunday is now CYBR.Signal, and Chris Wysopal is done waiting for the industry to fix itself.
Chris Wysopal Says Awareness Won't Fix Cybersecurity
Cybersecurity pioneer Chris Wysopal argues that awareness campaigns have failed and that software liability and accountability are needed to improve security.
Why Security Tools Fail to Reduce Risk: The Cybersecurity Shelfware Problem
Chris Wysopal warns that buying security tools without fixing vulnerabilities creates activity, not risk reduction.
AI Found Seven FatFs Bugs. Now Someone Has to Fix the Devices
AI uncovered seven FatFs flaws affecting embedded devices. The challenge now is patching millions of systems with no easy fix.
Cybersecurity Lessons from the Semiquincentennial of Liberty
As the United States of America enters its second quarter millennia, the tradeoff of security and liberty is never more apropos than it is to the cybersecurity industry. (Includes infographic)
HOU.SEC.CON. Is Now CYBR.SEC.CON.
CYBR.SEC.CON. didn't replace HOU.SEC.CON. It grew from it, expanding from a Houston conference into a national cybersecurity event. (Includes infographic)
Size DOESN'T Matter When It Comes To DDoS Attacks
The biggest DDoS attacks grab headlines, but impact matters more than size. Learn what defenders should really measure.
Stewarding the Generative Set in the Age of AI
As AI spreads, communities need trusted stewards to provide context, judgment, and accountability where automation falls short.