Most organisations are carrying more security debt than they realise. It’s not just old severs and unpatched systems, but years of shortcuts,exceptions and 'temporary' decisions that never quite got unwound. On paper controls exist. In reality, there are seams, overlaps, and blind spots that only become visible when something goes wrong. Security debt is the … Continue reading Living with Security Debt
Threat actors are not a single, uniform group. They range from financially motivated gangs to state-linked operators and loosely structured criminal ecosystems, each with different objectives and levels of sophistication. Understanding a few prominent examples can assist teams in thinking more clearly about how attackers operate. This helps identify where defences are likely to be … Continue reading Understanding Modern Threat Actors: Perspectives & Strategies
The Security Brief 