BlueVoyant Appoints John Hultman as Chief Revenue Officer
Industry veteran and CRO joins BlueVoyant to lead global sales and revenue operations as it scales its AI-driven cybersecurity portfolio.
Security | Threat Detection | Cyberattacks | DevSecOps | Compliance
The Latest Cybersecurity News & Insights From Around The World
Revoked Isn't Removed: The Supplier Exposure a Federal Ban Leaves Behind
Federal security restrictions and procurement bans have targeted Chinese telecommunications and technology suppliers for years. But removing a company's name from an authorization is not the same as removing the risk it carries into a supply chain. For C-SCRM programs, the harder question is identifying where that risk persists — through affiliates, resellers, data center tenancies, and proxy or sub-tier relationships that no order directly names.
The Difference Between Knowing a Vendor Is Risky and Knowing Exactly Which Assets to Fix
When a vendor’s risk score changes, a TPRM team can see what issues were flagged, why they matter, and what remediation steps are recommended next. But improving a vendor’s risk posture is not always as simple as working through each risk finding one by one. Sometimes the bigger pattern sits at the asset level.
The "I" in FOCI: When Foreign Influence Becomes Cyber Risk
Foreign Ownership, Control, or Influence (FOCI) risk is often discussed as an ownership problem. Who owns the supplier? Who sits on the board? Is there a parent company tied to a foreign government? Does that relationship trigger CFIUS, export controls, sanctions, or a facility clearance review? These questions matter, but they do not capture the full risk picture. For C-SCRM program stakeholders, the most important word in FOCI is not ownership or control — it is influence.
BlueVoyant Launches Solution to Accelerate Agentic Security Adoption of Microsoft's New Integrated Security Operations Centre
Deployment services to help Microsoft 365 E5, E7 and Microsoft Defender Suite customers build the foundation for an agentic SOC.
3 Things CISOs Need to Know About Microsoft's ISOC Announcement
Cost pressure can decide what your security team gets to see. A useful log source gets left out. Investigation history gets shortened. Analysts work with the evidence the organization could afford to keep. That is the part of Microsoft's Integrated Security Operations Center, or ISOC, announcement I keep coming back to. Bringing SIEM capabilities into the Defender experience, using native security data, and changing the economics gives customers a reason to revisit those decisions.
Agent Sprawl is the New Shadow IT
As you’re reading this, it’s possible an agent you’ve never heard of is reading your files. But where did it come from? What systems can it access? And who’s responsible for its oversight? Today, employees are using AI and agents to expand what they can accomplish and how work gets done. And the barriers to innovation have never been lower — with natural language and no-code tools, anyone in your organization can build a new agent in the span of an afternoon.
AI Agents Are Forcing Us to Rethink Identity
Since joining BlueVoyant in May, I’ve spent my first 100 days listening. I've had conversations with nearly 50 customers and partners across industries and geographies, as well as the broader security industry, engaging with leaders at Black Hat last month. What I heard reinforced something I believe strongly: the security challenges organizations face today are changing faster than the traditional enterprise security model was designed to handle.
Featured Post
Why Data Governance Has Become a Critical Defence Against Ransomware in Healthcare
Ransomware and ransomware-style attacks can have a catastrophic impact within healthcare, where disruption directly impacts safety and continuity. Today's ransomware groups increasingly operate as sophisticated criminal enterprises, sharing tools, infrastructure, and expertise through ransomware-as-a-service (RaaS) models. This lowers the barrier to entry for cybercriminals while allowing experienced threat actors to focus their efforts on identifying and exploiting high-value targets.
Featured Post
Why Annual Third-Party Cyber Risk Assessments Are No Longer Enough
As regulators tighten expectations and cyber attacks increasingly exploit supply chains, organisations must shift from periodic vendor assessments to continuous third-party cyber resilience. For years, third-party cyber risk management focused primarily on vendor due diligence and annual security assessments. The objective was simple: determine whether a supplier met an acceptable level of security at a specific point in time.