Every few years, something comes along that reshapes the threat landscape and sends the industry scrambling for new tools, new frameworks, and new buzzwords. The perimeter died. Then it came back. Endpoints became the priority. Now they’re not the whole […]
The Attack Surface Changed but the Fundamentals Didn’t Read More »
There’s a pattern that shows up in incident response work that nobody talks about in the vendor briefings. You bring in forensics after something goes wrong, and somewhere in that process, you find a tool — already deployed, already licensed,
What the Breach Reveals That the Budget Never Did Read More »
The word “platform” gets used a lot in cybersecurity. Maybe too much. Cato Networks recently announced a modular adoption model for the Cato SASE Platform. The company also used the moment to make a sharp argument about what platform actually
Cato Networks Redraws the SASE Adoption Map Read More »
There’s a moment in my conversation with Bob Bobel where he mentions that customers are having a harder time finding people who actually know Active Directory. Not cloud identity — the old on-premise stuff that most large organizations still run,
The Microsoft Enterprise Recovery Problem AI Can’t Fix Read More »
For decades, the IT industry has treated the office printer like the crazy uncle at a Thanksgiving dinner: we know he’s there, we know he’s a bit of a liability, but we largely ignore him until he starts a fire.
Most identity attacks don’t begin with malware. They start with a valid credential — a misconfigured account, an over-privileged service identity, or stolen credentials that give an attacker a quiet way in. By the time anyone knows something is wrong,
How Cayosoft Is Pushing Identity Security ‘Left’ of the Attack Read More »
Fresh off RSAC 2026, I sat down with Ramin Farassat, Chief Product Officer at Menlo Security, to work through what agentic AI is actually doing to the enterprise attack surface. Menlo has spent 13 years focused specifically on browser security
The Browser Was Already a Problem – Now Add a Billion AI Agents Read More »
Automated traffic on the internet grew nearly eight times faster than human traffic in 2025. The more important shift isn’t the volume—it’s what that automation is actually doing now. For years, the bot problem was mostly a nuisance. Scrapers grabbed
The Internet Is No Longer Built For Humans Read More »
The cybersecurity industry has spent the better part of two years trying to figure out how to secure AI agents. Most of that energy has pointed upstream: model governance, configuration hardening, intent-based policy layers, guardrails. Those things aren’t wrong. But
The Agentic Threat Surface Already Has A Defense Read More »
Web application firewalls have been around for roughly 30 years. In that time, web traffic has fundamentally changed—from humans browsing pages to APIs, bots, and now AI agents executing transactions at scale. The WAF hasn’t kept pace. And in a
Web Application Firewalls Are Broken, and Everyone Knows It Read More »
