🚀 Excited to share my latest Governance, Risk, and Compliance (GRC) project completed on Cyberr, where I engineered an audit-ready, mini-Information Security Management System (ISMS) from the ground up. Simulating the role of a Cybersecurity Governance, Risk and Compliance Cons…
"Why would anyone bother targeting us?" might be one of the most expensive questions an organization can ask when it's being used to justify doing nothing. I've heard variations of that argument throughout my career, usually somewhere between a CTI assessment identifying a credi…
Victor Manuel Font Jr — Keynote Speaker | Strategic Technology Leader | Fractional CIO | IT & Cyber Governance Expert | Published Author | FedRAMP Readiness | Board-Level Advisor | Digital Transformation | Enterprise WordPress/Formidable Forms
Organizations routinely invest in enterprise architecture, security architecture, application architecture, and data architecture because they recognize that important capabilities require intentional design. Yet governance evidence is often left to chance. Policies, meeting min…
Jason Murray — Strategic Information Security Leader Championing Quantified Risk Analysis and Security Process Improvement.
I read every primary report behind the nine AI "escapes" of 2026: the OpenAI agents at Hugging Face, Anthropic's four, AISI's, Meta's, Moonshot's, and the DseWiki case. I found nine leaks, and nine groups of people who built the environments and then, to their credit, wrote most…
What happens when vulnerabilities are discovered faster than organizations can patch them? We may be approaching that reality. Google Threat Intelligence reports that monthly vulnerability disclosures more than doubled in 2026—from 5,045 in January to 10,477 in July, reaching 10…
Supermarket fridge hacking attacks due to lack of basic cybersecurity measures, expert says French investigators on Tuesday were hunting the hackers who seized control of cooling units at hundreds of supermarkets in a cyberattack that underlined the vulnerabilities of connected…
Cybersecurity has a buzzword addiction, and I'm starting to wonder how much actual strategy is hiding behind all that vocabulary. We talk about innovation, agility, transformation, and becoming intelligence-led, but none of those things mean much to a business that's losing reve…
Cyber security skills in the UK labour market 2026 Mapping the workforce Approximately 145,900 individuals work in the UK cyber security workforce, up 2% on the previous year 53% of cyber firms expect to grow their workforce in 2026 Average core cyber job postings grew 7% compar…
The theme "Before the Insider Acts: Understanding the Path to Insider Risk" highlights a critical point often overlooked by boards and investors: most insider incidents are preceded by observable behavioral, access, or governance warning signs. Why Insider Risk Matters for Share…
OAuth & MCP Investigation Checklist: 4 Steps to Assess Risk As organizations adopt OAuth-connected applications and Model Context Protocol (MCP) integrations, it's important to evaluate how these connections could expose sensitive data or increase attack surface. 1. Inventory Co…
Global professional services firm Ernst & Young (EY) is reportedly investigating a data breach that exposed sensitive information belonging to a number of financial-sector clients, including Goldman Sachs. According to reports, attackers gained unauthorized access to systems con…
Marco Iacovitti — Chief Innovation Officer & Chief Information Security Officer
What cybersecurity IS? It's not attributable only to “security of IT” Cybersecurity is a "coordinated system" of layers that could be, rateher, are surely imperfect but absolutely complementary each other. Each layar has it's hole (passages) like a slice of "Swiss Chees". The su…
Christian Toon — Fractional CISO | Strategic Cyber, Technology & AI Advisor | Founder, Alvearium Associates
Board cyber reporting has a recurring genre: the traffic-light dashboard where everything is amber, nothing is urgent, and the same three risks have been amber since the last reorganisation. Amber is not a risk position. It is a way of avoiding a decision while appearing to have…
You join a 100-person SaaS company tomorrow as its first security hire. There is no security team, no formal security programme, customers are already sending security questionnaires, and the company wants to start selling to larger enterprises. You have a limited budget and a l…
Samantha Swift — Product, Go-to-Market & Marketing Leadership
📢 Shared from Cyberr UK As interesting UK government consultation is open right now from the Law Commission, exploring whether software (including AI) should be covered under product liability: https://lawcom.gov.uk/project/product-liability/ I would definitely encourage securi…
OLUWAJUOLALO Jola ADEYEMO — Information Security & Compliance Specialist
Very happy to share I passed the ISACA CISM (Certified Information Security Manager) exam! 🎉 Resources that made the difference for me: - Pete Zerger CISM YouTube playlist - Prabh Nair Last Minute Pointers - ISACA QAE Database #ISACA #CISM #InformationSecurity #SecurityGovernan…
AI Made Attackers Faster. How Fast Can You Respond? Generative AI has fundamentally changed the cybersecurity landscape. Tasks that once required specialized expertise, such as crafting phishing campaigns, writing malware variants, researching vulnerabilities, and identifying ta…
I spend a lot of my time in M&A and PE circles, especially in Luxembourg and in the Netherlands. Some people recognize me for my flamingo obsession, and it has become my accidental calling card, even among people at major private banks I would rather not name. But that's fine. I…
If the headline "Anthropic Expands Claude Cybersecurity With Three-Tier Access" refers to a structured access model for cybersecurity capabilities, the strategic significance lies less in the feature itself and more in how it balances commercial growth, risk management, and regu…
People are socially and naturally motivated to seek opportunities for joint action. Similarly companies and organizations seek economically motivated partnerships, joint ventures or other M&A activities to form strategic alliances. These are indispensable for accessing specializ…
HOTEL PAYMENT SYSTEMS: CONVENIENCE SHOULD NOT COME AT A SECURITY RISK Hotels process payments everywhere - reception, restaurants, bars, events and online bookings. Every channel needs the right security. A poorly secured payment environment can increase the risk of: • Card data…
Tunnel vision may be one of the more dangerous vulnerabilities in threat intelligence, because the analyst rarely knows when they have it. There is a strange point in an investigation where a hypothesis begins to feel like an answer. A few indicators align, an actor looks famili…
Cybersecurity Skills Gap Becomes a Business Risk: Fortinet Fortinet’s 2026 Cybersecurity Skills Gap Report finds that 71% of organizations view the skills gap as an additional business risk, while 86% experienced at least one breach in the past year and 56% of those incidents we…