6 min read
Nobody Hacked the NBFCs. Their Own Systems Approved the Heist.
RBI now wants banks to prove their API controls work in practice, not just on paper. The Mumbai NBFC heist shows why the question at the heart of...
KEEP READING
8 min read
AI Is Exploiting Web Apps in Hours. Are You Seeing It?
Key Takeaways for Security Leaders
- The patch window has collapsed. AI tools...
.png?width=337&height=172&name=php2shell%20(CVE-2026-109618%20%26%20CVE-2026-109619).png)
6 min read
php2shell leaked before the patch. Here’s how to close the gap.
Most critical vulnerabilities need something to line up before they become...
3 min read
Intent Based Security: The Cultural Shift in SOCs
This is the final post in a 25-week series on data science and the future of...
2 min read
A Letter to Those Choosing a Trusted Security Vendor
I want to write this post differently from the others in this series - not as...
2 min read
Probabilistic Security & Attack Path Management
Adversary path modeling is the capability that most directly embodies...
3 min read
Deterministic Defense vs Probabilistic Offense Mismatch
I want to name something clearly that I think explains more about why well-run...
Subscribe for updates
The best source of information for Agentic SOC and Cyber Risk Operations best practices. Join us.
