Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

The Howler Episode 33 - Matt Setzer, SVP, Chief Architect

This month, we sit down with Matt Setzer, Senior Vice President, Chief Architect, to learn more about a day in the life of an architect, his philosophy on meaningful innovation, and so much more! Matt Setzer is SVP & Chief Architect at Arctic Wolf, where he partners with product and engineering leadership to set the technical strategy for the Arctic Wolf products and platform. Matt has spent the last twenty years in senior engineering and architect roles in the security space at Microsoft and Sophos. Prior to that he spent number of years working in the game industry.

On-Premise vs. Cloud IGA: How Do You Choose the Right Deployment for Your Organization?

Choosing the right deployment model for your Identity Governance and Administration (IGA) system is a high-stakes decision that affects many aspects of your organization. It determines how you manage access across your entire enterprise. It also dictates your audit readiness and integration capabilities. Now you might assume that the cloud is the only modern option. However, many organizations are changing their infrastructure strategies.

IGA Implementation Checklist: A Step-by-Step Guide for a Successful Rollout

Identity Governance and Administration (IGA) sounds straightforward on paper: control who has access to what, prove it to auditors, and automate the boring parts. In practice, most organizations underestimate how many moving parts an IGA rollout actually has. This checklist breaks down the exact steps, decisions, and evaluation criteria you need to move from planning to a stable, audit-ready deployment.

Cyber Risk in Healthcare: Quantifying Ransomware and EHR Downtime

Ransomware has shut down hospitals and data breaches have exposed millions of patient records. But healthcare organizations still struggle to manage cyber risk, because decisions get made on compliance checklists and generic threat scores that reveal nothing about real business impact. In this video, Kovrr breaks down how cyber risk quantification turns healthcare threats into financial terms, and why that changes the conversation between CISOs, compliance leads, and the board.

The risk of using abandoned packages in the age of LLMs

This post is an unfortunate affirmation of our prior research into abandoned open-source packages, where we found that 11% of the most-downloaded packages have been abandoned and not actively maintained, becoming invisible vulnerabilities to your scanner. Today we share a zip-slip vulnerability we found in extract-zip (CVE-2026-19693), an npm package with over 20 million weekly downloads.

American Cyber Mercenaries - The 443 Podcast - Episode 383

This week on the podcast, we discuss a new White House memorandum that creates a program to authorize American private companies to begin conducting offensive cyber operations. Before that, we discuss a vulnerability write up for a Citrix Netscaler flaw before covering yet another prompt injection vulnerability in a popular AI tool.

Securing Black Hat's NOC: Lessons from James Pope of Corelight

Corelight’s James Pope joins Dark Reading’s Joan Goodchild at Black Hat USA to share lessons from more than a decade defending one of cybersecurity’s most unique network environments: the Black Hat Network Operations Center (NOC). As SOC lead for the Black Hat NOC since 2014, James helps oversee more than 100 analysts, threat hunters, and partners tasked with distinguishing legitimate security research from real attacks across a network built from scratch for the conference.