Late September, Citrix disclosed two critical vulnerabilities in NetScaler ADC and NetScaler Gateway, both scoring 9.5 on CVSS. One let an unauthenticated attacker run arbitrary commands on a default configuration, no special setup required. The other bypassed authentication and handed attackers root access. Both were exploited as zero-days, before any patch existed, and tens of…
October is Cybersecurity Awareness Month. CISA’s 2026 theme is “Securing the Next 250,” tying the campaign to the country’s semiquincentennial and framing national cyber resilience as part of the broader infrastructure conversation. Most organizations will run their annual push this month: phishing simulations, an all-hands presentation, maybe a poster campaign. That’s useful, and it should…
Every large organization is somewhere on the enterprise AI deployment curve right now. Some are running Copilot across tens of thousands of employees. Some are piloting internal models in controlled environments. Some have deployed AI agents into operational workflows. And a significant number have done all of the above, in different corners of the organization,…
SOC 2 Type 2 has become the de facto trust signal for technology and service organizations. Enterprise buyers require it before vendor onboarding. Investors reference it during due diligence. Boards treat it as assurance that their third-party security posture is managed. The problem is that most people requesting SOC 2 Type 2 reports — and…