Executive Summary: Drop catch domains create a significant security risk when expired domains are re-registered and used as...
Drop Catch Domains: What They Are, Why They Matter, and How to Act
read more
Cybersecurity Awareness Month: The 3Rs for a Stronger Security Posture
Executive Summary: Cybersecurity Awareness Month is a useful reminder that resilience is not built by adding more tools—it...
The Cloud Configuration Blind Spot: Lessons from GitHub’s Outage
Executive Summary: GitHub’s August 17 outage illustrates a difficult truth about modern cloud infrastructure: a...
7 DNS Security Lessons from the CubePilot Hijacking
Executive Summary: The July 2026 DNS hijacking of drone technology company CubePilot demonstrates how control of DNS can...
PQC Is a Stress Test for Enterprise DNS
Executive Summary: Post-quantum cryptography (PQC) is often framed as a cryptographic upgrade. For enterprise DNS, however,...
Salesforce, Klue, and the OAuth Token Nobody Was Watching
Summary: A vendor called Klue lost control of a GitHub token. That single lapse ended up exposing Salesforce data of its...
6 Places Pharma Data Goes That Security Teams Can’t Always See
Executive Summary: Pharmaceutical companies are moving sensitive patient, research, clinical, and intellectual property...
The Cost of Assuming Your Cloud Is Secure
Executive Summary: The Nextcloud data exposure is a reminder that cloud security failures rarely announce themselves. A...
When One Extra Letter Costs $545,000: Defending Your Domain Against Typosquatting
Executive Summary The $545,000 Surfside Beach fraud demonstrates a growing security blind spot: attackers don’t need to...