Category: Cybersecurity
-
The Cyber Insurance Carrier Wants Your Logs Now
The cyber insurance carriers, in 2026, are not just raising premiums and narrowing coverage. They are also demanding more from the buyers as a condition of coverage. The new demand is operational visibility, specifically access to the SOC outputs, the SIEM logs, the EDR telemetry, the identity logs, the cloud audit logs, often in real…
-
Your DLP Is Not Stopping Data Exfiltration
Data loss prevention, DLP, has been a security control category for 20 years. DLP, in most deployments, catches accidental data exposure. DLP does not, in most deployments, stop intentional data exfiltration. The gap is the reason DLP has been a $2 billion market that has not, by any measurable metric, reduced the rate of data…
-
The OWASP Top 10 Hasn’t Kept Up
The OWASP Top 10, the canonical list of web application security risks, has been a foundational reference for 20 years. The 2021 edition added four new categories. The 2025 edition is overdue. The categories do not adequately cover the threats that have emerged in the last 5 years: prompt injection, agent autonomy, training data poisoning,…
-
The ‘AI in Security’ Vendor Pitch Is Not the Same as AI in Security
Every security vendor now says they use AI. The phrase, in the security context, is even more inflated than the broader ‘we use AI’ problem. The products that actually use AI in security, in ways that materially change detection, response, or prevention, are a small subset.
-
Your Threat Intelligence Feed Is Mostly Noise
Every enterprise in 2026 subscribes to one or more commercial threat intelligence feeds. The feeds promise context about who is attacking, what they want, and how they operate. The feeds deliver, in most cases, a firehose of indicators that nobody has time to action.
-
The Cyber Insurance Market Is Breaking
Cyber insurance used to be a hedge. Premiums are up 200 to 400% over the last 4 years. Coverage is down. Exclusions are everywhere. The insurers are pulling out of the market. The market is breaking, and the breaking is going to reshape how companies think about cyber risk.
-
The Password Is Dying. The Passkey Is Not Winning.
Every year for the last 10 years has been the year the password was going to die. The year has not arrived. The password is still the dominant authentication mechanism. The passkey, the technology that was supposed to replace it, is technically a complete success and is still stuck in adoption.
-
Your SaaS Sprawl Is Your Biggest Breach Surface
The average enterprise in 2026 uses somewhere between 100 and 300 SaaS applications. The enterprise has direct visibility into maybe 20% of them. The other 80% is shadow SaaS, signed up by individual employees or teams, integrated into the workflow, holding company data, often with admin access to the company’s primary systems.
-
The Zero Trust Marketing Has Eaten Zero Trust
Zero trust was a security architecture model. Zero trust is now a marketing term. The original model, articulated by John Kindervag at Forrester in 2010, was a specific approach to security. The marketing co-opted the model. The term now appears on products that have nothing to do with the model.
-
The CISO and the Acquisition Due Diligence in 2026
The acquisition due diligence the CISO has been involved in has become the diligence the CISO has been quietly dreading, the diligence that decides whether the enterprise buys the company the CISO is about to inherit the security debt of.