In a field drowning in initials, vCISO is the one that can save a small organization real money At a charity lunch this spring, a woman who runs a twelve-person insurance agency slid a vendor proposal across the table to me. She had circled seven acronyms on the first page alone. MFA. EDR. SIEM. SOC. […]
Cyber Security Weekly Roundup: Top 5 for the Week of July 20-26, 2026
This week the threat landscape sharpened around two themes: the weaponization of AI agents and the exploitation of trusted access. A single link could forge a rogue AI insider, extortion crews leaned on the phone rather than the exploit, and a fired employee’s credentials became a live breach. Here is what mattered, and what to […]
The Small Health Care Practice Is Cyber Crime’s New Target
A small health care practice in a Kentucky county seat lost access to its patient records on a Monday morning last winter. The front desk could not pull up a single chart. Appointments backed up into the parking lot. The office manager told me later that she had always assumed criminals went after the big […]
Cyber Security Weekly Roundup: The Week of July 13-19, 2026
1. SharePoint zero-day under active attack forces federal patch deadline. CISA added CVE-2026-58644, a critical (CVSS 9.8) deserialization flaw in on-premises Microsoft SharePoint Server, to its Known Exploited Vulnerabilities catalog on July 16, giving Federal Civilian Executive Branch agencies until July 19 to remediate. The bug allows unauthenticated remote code execution and was weaponized as […]
Hackers: Who Is Actually Trying to Break Into Your Systems?
Picture the hackers. If a teenage boy in a dark bedroom came to mind, hood up, soda cans on the floor, you are not alone. That image has been marketed to us for thirty years.It is also mostly wrong, and believing it can cost a small business or a county office real money. I have […]
Cybersecurity Weekly Roundup: Week of July 6 – July 12, 2026
Top 5 Cyber Security News Stories 1. ShinyHunters Exploit Oracle PeopleSoft Flaw, Hit 100+ Organizations Including Nissan The ShinyHunters group ran a sweeping campaign this week exploiting a vulnerability in Oracle PeopleSoft to break into HR and payroll systems at more than 100 organizations. Nissan was among the most prominent victims, with attackers exfiltrating sensitive […]