Latest Blog Posts
Discover recent insights and updates
The Semantic Attack Surface: Defending LLMs Against Prompt Injection
Why You Need Implement OWASP SAMM and DSOMM
CISO Assistant: Your Open Source GRC Powerhouse
CISSP Ethics: Don't Let Sleeping Dogs Lie
OTHER POSTS
DefectDojo: Unified DevSecOps Security
DefectDojo stands out as a powerful and flexible platform for DevSecOps orchestration and vulnerability management. Born out of a deep understanding of the frustrations in cybersecurity, it provides a crucial solution for consolidating, automating, and intelligently managing security findings from a diverse ecosystem of tools.
Living Off The Land (LOTL) Attacks: The Stealthy Threat Within
Living Off The Land attacks represent a fundamental challenge to traditional cybersecurity approaches, exploiting the trust relationships and legitimate tools that organizations depend on for daily operations. However, the combination of SIEM and SOAR technologies provides a powerful framework for detecting and responding to these sophisticated threats.
Prowler: The Essential Cloud Security Tool
For organizations serious about cloud security, Prowler represents a practical, cost-effective solution that can significantly enhance security postures while reducing the operational burden on security teams. As the cloud security landscape continues to evolve, having tools like Prowler in your security arsenal isn't just recommended—it's essential.
The Modern CISO: From Doer to Enabler
Edward Roffe’s vision of the CISO as an enabler rather than a doer reflects a pivotal shift in cybersecurity leadership. By empowering teams, shaping strategy, and focusing on metrics like team maturity, business alignment, and risk trends, CISOs can thrive in this role. Monitoring threats, regulations, and business needs keeps them impactful. While challenges persist in some settings, the modern CISO’s strength lies in building a capable team and leading from a strategic perspective.
RSAC 2025: Key Trends and Emerging Niches
The overarching message from RSAC 2025 is clear: the cybersecurity industry needs to move beyond fragmented, reactive approaches. The future lies in holistic, automated, and context-aware solutions that address the foundational shifts in how organizations operate, particularly the centrality of identity and the pervasive nature of the browser.
Top Open Source SIEM Tools in 2025
Security Information and Event Management (SIEM) systems are crucial for modern cybersecurity. Learn about the top open source SIEM solutions available in 2025, from established tools like Wazuh and OpenSearch to emerging platforms, helping you build a robust security monitoring infrastructure without breaking the budget.
How to Measure Cybersecurity with KPIs
You can’t improve what you don’t measure. Cybersecurity KPIs aren’t just a compliance checkbox — they’re the foundation for building resilience, driving accountability, and enabling continuous improvement. They help transform incident response from reactive firefighting into a measurable, managed function.