digiDations

As security leaders, our daily work is largely defined by the tools we use and the intelligence we receive. We open vulnerability scan reports to see hundreds of new CVEs; we access threat intelligence platforms to read TTP analyses of…

Security departments are typically comprised of two core pillars: the Vulnerability Management team and the Security Operations (SOC) team. Both teams fight tirelessly every day to protect the organization. However, a closer look at their daily routines reveals a strange…

Reporting security performance to the C-suite is perhaps the most daunting challenge a CISO faces. Technical jargon is lost on them, and they have grown weary of hearing the same old “risk stories.” As a result, when you request a…

Recently, British automotive giant Jaguar Land Rover (JLR) suffered a significant cyberattack that brought production lines to a halt. The shutdown has now been extended to October 1st, forcing 33,000 employees to take mandatory leave. This crisis hasnot only disrupted…

Last month, global attention has focused on the BMW Group’s encounter with the Everest ransomware. This notorious group not only claimed to have exfiltrated massive volumes of critical internal documents but also brazenly posted a countdown online, threatening to expose…

The release of MITRE ATT&CK Framework v18 should not be regarded as merely a routine version update by any team serious about security operations. The core message it conveys is an unprecedented demand for detection precision. If our understanding remains…

In the cybersecurity industry, BAS is no longer a novel concept. Many teams have adopted it, with the good intention of continuously and automatically testing their defense systems to see what works and what doesn’t. This is certainly a much…

There’s a strange phenomenon in our cybersecurity community, and I wonder if others feel the same way: we’re working incredibly hard, yet our management often perceives us as unproductive. When all goes well, we’re seen as a cost center, consuming…

Anyone who has ever managed a SOC keeps a mental ledger of where the team’s time is spent. The biggest line item on that ledger, without a doubt, is the time wasted validating the authenticity of SIEM alerts. Every day,…

01.The AI Takeover: A Revolution in Cyber Offense is Already Here. Two recent shifts have shaken up the security world and here’s why they matter for your team: The message is clear: AI-driven attacks are no longer a theoretical threat.…

If you’re running an in-house security team, you know the struggle is real. Year after year, we champion the importance of security. The budget is approved, the new appliances are installed, the talent is hired, and the team works around…

In client-side organizations, measuring the return on investment (ROI) of security spending often feels like an “unaccountable equation.” While we all recognize the critical importance of security, demonstrating the value of security efforts clearly and persuasively to senior management and…

The Myth of Vanity Metrics After years of working in the security field, we’ve observed a common phenomenon: many organizations overly rely on “vanity metrics” when measuring security effectiveness. These metrics may look impressive on the surface—such as the number…

Gartner’s recently released Market Guide for Adversarial Exposure Validation (March 2025) reveals important changes in the field of security validation. This article will analyze these key findings and their impact on your organization’s security strategy, and explore why continuous threat…

A recent study published on arXiv of Cornell University reveals a concerning fact: Even when implementing the most comprehensive security frameworks in the market, enterprises still struggle to defend against major supply chain attacks such as those of SolarWinds, log4j,…