Jason Alexander

Article Summary: Cyber insurance applications have grown longer because of specific claim trends from 2023 and 2024, including the MOVEit supply-chain breach, the Change Healthcare ransomware incident, and the Arup deepfake wire fraud. Each new section asks about specific security controls including immutable backups, layered MFA, callback verification on wires, EDR or MDR coverage, vendor […]

Article Summary: Offboarding is the final step of a process that started on the employee’s first day. Shared logins, forgotten SaaS subscriptions, untracked personal devices, and client relationships locked inside one person’s inbox are almost always traceable to informal onboarding shortcuts taken months earlier. Tightening the onboarding side turns each future departure into a 90-minute […]

Article Summary: Immutable backups are backup copies that nobody can change or delete during a fixed retention period, including administrators and attackers using stolen credentials. Cyber insurance carriers ask about them on renewal applications because ransomware operators routinely destroy backups before encrypting production systems. A backup sitting on your network under regular admin credentials does […]

Article Summary: Microsoft 365 Copilot retrieves files, emails, and chats using each user’s existing Microsoft 365 permissions. In most tenants, those permissions are broader than anyone has mapped, because access accumulates across years of projects and staff changes. A safe Copilot rollout begins with auditing those permissions, fixing the gaps, and applying sensitivity labels to […]

Enterprises are deploying autonomous AI agents faster than they can secure them — and the result is a sprawling new attack surface that legacy security tools were never built to handle. If 2025 was the year organizations aggressively deployed agentic AI to automate everything from code deployment to customer service, 2026 is shaping up to […]

Who Is Trellix — And Why Does This Matter? Before the breach can be understood, the target must be. Trellix is not a small startup. It is the product of one of the largest consolidations in cybersecurity history — and a company that sits at the heart of enterprise defense for organizations around the world. […]

When ShinyHunters breached Instructure in April 2026, they didn’t just steal data — they exposed how dangerously unprepared the global education sector is for sophisticated cyber extortion. What happened? In late April 2026, the ransomware and extortion group ShinyHunters quietly compromised Instructure — the company behind Canvas LMS, the world’s most widely used learning management […]

Article Summary: Personal web habits are one of the least visible cybersecurity risks businesses face, especially when work and personal life share the same devices, browsers, and identities. Routine behaviour like checking personal email, reusing passwords, or signing into familiar apps can expose business data without anyone intending it. The safest approach reduces exposure with […]

As cybercriminals wield generative AI to launch faster, smarter attacks, defenders are racing to deploy their own machine intelligence — and the arms race is rewriting the rules of cybersecurity. For most of the internet era, cybersecurity was a fundamentally human problem fought with human-designed tools. Analysts pored over logs, signature databases catalogued known malware, […]

Article Summary: Passwords remain a leading cause of breaches, yet most teams still rely on them for daily access. Passkey migration replaces passwords over time with device-bound, cryptographic credentials that can’t be phished, reused, or stolen from a server. This shift reduces credential risk and helpdesk friction, and most teams already have the core infrastructure […]