Improving security posture across the Microsoft partner ecosystem
The Deputy CISO blog series is where Microsoft  Deputy Chief Information Security Officers (CISOs) share their thoughts on what is most important in […]
CISA Releases Binding Operational Directive on Prioritizing Security Updates Based on Risk
On June 10, the Cybersecurity & Infrastructure Security Agency (CISA) released Binding Operational Directive (BOD) 26-04 on Prioritizing Security Updates
Repeat Offenders in Phishing: Here’s How We Train Them Out
Why are people still clicking? That’s the question echoing through security teams right now. Even in programs built on “best
EU-US Data Privacy Framework Faces Legal Challenge
The EU-US Data Privacy Framework is facing renewed legal scrutiny after privacy advocacy group noyb announced plans to challenge the
How to prioritize AI agent security by business impact
Your CEO calls about an AI agent security incident in finance. He wants to know whether money moved, whether financial
What Is Data Loss Prevention (DLP): The Complete Guide
Data loss prevention (DLP) is a cybersecurity strategy that identifies sensitive data, monitors how it’s used and shared, and prevents
From Lobster Heists To Bourbon Warehouse Scams
Illustration of a long shadow truck with a thief getty Last January, I told you about the great lobster heist
Spyware found on phone of European Parliament member probing it
A phone belonging to a former member of the European Parliament was targeted and infected with Pegasus spyware multiple times
FBI Seizes NetNut Proxy Platform, Popa Botnet – Krebs on Security
The Federal Bureau of Investigation (FBI) said today it worked with industry partners to seize hundreds of domains associated with
CUI vs. Classified vs. Other Sensitive Data: Understanding the Differences
In modern, complex security and compliance environments, not all sensitive information is created equally. Government and defense contractors and suppliers,