32 posts
CISA and NIST’s final IR 8587 (Sep 15, 2026) hardens identity tokens and assertions for SSO and APIs. Here is what NYS SMBs on Entra/M365 should ask architecture and MSPs to change this month.
Citrix NetScaler CVEs hit CISA’s KEV catalog in late September and again on October 4. For NYS SMBs and SLED shops with internet-facing gateways, the order of operations is triage, then patch — not the reverse.
CISA retired support for Logging Made Easy effective May 22, 2026. The bits still exist, but nobody at CISA maintains them — here is a buyer’s checklist for NYS SMB logging without shelfware.
A practical guide for US subsidiary teams navigating the UK's Cyber Assessment Framework for the first time
A practical guide to the UK's baseline cybersecurity certification—and how a US-based SaaS company can get certified with little disruption to delivery.
A Comprehensive Analysis of Software Lifecycle Security Evolution (2015–2025)
A practical guide to the security controls that actually matter when your prime contractor sends that flow-down clause
Secure & Compliant Data Management
Introduction
Data lineage is a critical concept within data management that revolves around tracing and documenting the life cycle of data as it moves through various...
Introduction
Abstract: This paper examines the transformative journey of security architecture from centralized computing models to the integration of Internet of Things...
Cybersecurity threats rapidly evolve, using speed and interconnected vulnerabilities to their advantage. The strategic combination of these vulnerabilities...
Building a Security Operations Center (SOC) with open-source tools is a strategic approach that combines cost-effectiveness with robust security...
In a world where data has become invaluable, data security management is a paramount concern for all organizations. It is the bedrock for safeguarding an...
Consider carefully the security of data saved within a container, particularly secrets. Navigating inherent security challenges and best practices is...
.
A new vulnerability, prompt injection attacks, has emerged as a top concern in LLM application development. These exploits target the fundamental mechanisms...
Introduction
Introduction
Data architectures are evolving rapidly to meet organizations’ changing data processing and analytics needs. Let’s delve into some key existing...
As technology progresses, so do the threats that aim to exploit it. Database security breaches are rising, and businesses must remain vigilant to prevent...
A New Engineering Model for Secure Velocity
Introduction
Introduction to Zero Trust
Autonomous AI agents compress decision-making and execution into one loop. Zero trust makes that loop governable.
How IBM’s Hyper Protect Crypto Services Gives You Absolute Control Over Your Data in the Cloud
Imagine building a car navigation system. It needs to let drivers input a destination and see a route on the screen—this is a functional requirement....
In today’s business environment, enterprise information systems increasingly leverage cloud and hybrid infrastructure to achieve greater agility,...
By Jim Venuto, March 24, 2024
Introduction to SBOMs
Purpose Statement: