Tag: Ransomware
-
Building a Virtual CISO Program in 2026
The virtual CISO program in 2026 sits as the program the small enterprise has been quietly turning to, the program the consultant has been quietly building, the program the auditor has been quietly accepting.
-
Why Your VPN Is About to Get Weird
The corporate VPN is the longest-running piece of security theater in tech. It is being replaced, slowly, by a stack of small ideas that happen to work better now than they did five years ago.
-
The CISO Handbook: The Second Edition
The first edition sold the idea that the CISO could be a peer to the CIO. The second edition quietly walks that back. The role has shifted, the board has shifted, the threat has shifted, and the playbook that worked in 2020 does not work in 2026.
-
Ransomware Payout: The Reality Check
Sophos says 29 percent of victims paid in 2024, down from 46 percent in 2022. Coveware says the average payment in early 2026 is around 200,000 dollars. The story is not the headline number, it is what is sitting underneath it.
-
Inside a Modern Ransomware Attack
Modern ransomware is not a virus. It is a business process. The attackers run it like a company, with departments, SLAs, and customer support for the victims.
-
The 3 2 1 1 0 Backup Strategy Explained
The 3-2-1 backup strategy has been the industry standard for so long that the new variant (the 3-2-1-1-0) sounds like a typo. It is not. The extra numbers serve as the answer to the ransomware variant that the 3-2-1 was not designed to handle.
-
DDoS Mitigation on a Budget
The DDoS attack in 2026 amounts to the attack the typical enterprise faces 5-20 times per year, with the attack peaking at 1-10 Tbps, with the attack lasting 1-24 hours, with the attack costing the enterprise $20K-$200K per hour in lost revenue. The mitigation in 2026 amounts to the work the typical enterprise does on…
-
The Windows Event Log Primer
The Windows event log in 2026 amounts to the single most underused source of security data in the typical enterprise. The enterprise buys the SIEM, the enterprise points the SIEM at the network, the enterprise misses the threats that the Windows event log would have caught. The primer for what the events are, what they…
-
Malware in Mobile Apps in 2026
Mobile app malware in 2026 sits as the threat the typical enterprise has not addressed, with the enterprise security program focused on the endpoint, the network, the cloud, with the mobile app sitting outside the security program. The mobile app sits as the app the employee uses for the work, the app the customer uses…
-
SIEM Cost Optimization: The Honest Guide
SIEM cost optimisation in 2026 amounts to a $5B annual problem for the enterprises running the legacy SIEMs, and a $1B annual problem for the enterprises that already moved to the cloud native SIEMs. The cost has not gone down, the data volumes have not gone down, the licensing model has gotten worse. The honest…