Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

CrowdStrike is excited to announce CrowdStrike Falcon Privileged Access, a new offering within CrowdStrike Falcon Identity Protection that uses high-fidelity risk signals to provide just-in-time access to organizations’ critical permissions and resources. Adversaries know valid credentials unlock access to data, infrastructure, and capabilities.

In this week’s episode of The Future of Security Operations podcast, I'm joined by Mark Hillick, CISO at Brex. Mark’s experience in the security industry spans more than two decades. He started out as a security engineer at Allied Irish Banks before advancing through companies like MongoDB to become Director and Head of Security at Riot Games. His book, The Security Path, features over 70 interviews with security professionals on their career journeys. Mark and I discuss.

John Fitzpatrick, a distinguished cybersecurity expert and founder of Lab 539, has dedicated his career to securing complex operational technology (OT) environments. His latest project, leveraging LimaCharlie's SecOps Cloud Platform, tackled the security challenges of fuel depots and terminals—critical infrastructure with stringent operational requirements and aging technology.

Your RAG implementation can expose secrets in some unexpected ways. Secure your LLM deployments and scrub knowledge bases to prevent your secrets from leaking.

I'm thrilled to announce Snyk API & Web, our next-generation dynamic application security testing (DAST) solution. It's more than just a product launch; it's Snyk’s answer to securing the complex, AI-powered applications developers are building today, deepening the integration of DAST into our comprehensive Developer Security Platform.

When it comes to exposure management, actionable context is key. Security teams don’t just need data – they need the right insights, in the right place, at the right time to drive remediation activities. That’s why seamless integrations between security and workflow tools are essential. At Seemplicity, building these integrations quickly and effectively isn’t just a goal, it’s a core competency.

Navigating the Cybersecurity Maturity Model Certification (CMMC) framework can feel overwhelming, especially for government contractors working to secure and retain Department of Defense (DoD) contracts. Between implementing the 110 rigorous security requirements in NIST 800-171 and maintaining ongoing compliance, the path forward can feel like a maze of complexity and cost. But there’s a smarter way through it.

As a cybersecurity company, we spend every day thinking about how to protect the world from threats. As a global organization, WatchGuard has the power ‒ and the responsibility ‒ to step up and help fight the threat of unchecked climate change. That’s why we have signed The Climate Pledge and are deepening our commitment to environmental sustainability.

Imagine a scenario where an employee receives an email from a colleague, asking for login credentials to a valuable application within their organization. The recipient, perhaps busy with other tasks or not fully paying attention, quickly replies with the needed credentials. However, the sender was not actually a colleague, but a threat actor posing as a colleague. As a result, the now-compromised credentials enable the threat actor to launch a subsequent attack on the organization.

From the 1st of April 2025, our dedicated London service has been decommissioned as a result of the recent government budget cuts to victim support services.