Check the
Latest News.

Blog

Security Staffing’s Problem Is Skills, and 60% Agree

For years, one number defined the security staffing conversation: a global headcount gap in the millions. In 2025, ISC2, the organization behind that number, stopped leading with it. Two major surveys, a record year for breach costs, and Europe's own regulator all point at the same reframe: the problem was never how many people you have.

Hiring, Security Staffing, Skills

Blog

MCP Security: 2 CVEs Your Team Can’t Ignore

The NSA doesn't usually publish design guidance on a protocol that's barely 18 months old. It did for MCP, naming eight specific risk categories. Here's what the two CVEs show, what OWASP already has a name for, and what a real internet scan found.

CVE, MCP, Security

Blog

Secrets Sprawl: 6 Patterns to Stop CI/CD Credential Leaks

Secrets sprawl isn't a public-GitHub problem anymore - it lives inside the CI/CD pipelines teams depend on every day. This piece breaks down six operational patterns that separate teams whose pipelines quietly accumulate leaked credentials from teams that actually close the gap.

CI/CD, Leaks, Secrets Sprawl

Blog

Vendor Risk: 5 Signals Your AI Supply Chain Is Exposed

Traditional vendor risk management assumes software is static. AI vendors aren't — models drift, sub-processors multiply, and shadow AI slips in through tools you already approved. Here are five signals your due diligence process is behind.

AI, Supply Chain, Vendor risk

Blog

Non-Human Identity: 5 Gaps AI Agents Expose in IAM

This piece breaks down five places IAM architecture still assumes a human is on the other end of the request, and what happens when that assumption fails.

AI Agents, IAM, Non-human Identity

Blog

SBOM and the CRA: 3 Deadlines Your Team Can’t Miss

The EU Cyber Resilience Act has a September 2026 deadline most teams don't know about. This guide covers the three CRA deadlines that actually matter and how to build an SBOM readiness plan before the clock runs out.

Compliance, Cyber Resilience Act, SBOM