I wonder what percentage of breaches leading to 'material' financial loss are reported as insurance claims. It'd be very interesting whatever the answer, but unsure exactly how to find the data.

Registration for the Cyber-Security Brazilian Jiu-Jitsu Smackdown (2025) is open! Held between @BlackHatEvents and @defcon (Thur, Aug 7), 60 of us step onto the mat for the most fun and epic experience. Former UFC Champion @ForrestGriffin is our head instructor, accompanied by.

Quick word of calibration though, the technical and strategic attack methodology used by red-teams are not always identical the adversary.

Experienced red-teamers generally know best what security controls actually work best, or which are largely ineffective. Ask them, and listen.

Estimating the likelihood that a vulnerability will be exploited is the same as trying to predict the future actions of sentient adversaries based on their past behaviors.

RT @wirespeed_: ⚡We just announced our Seed Round Investment backed by cybersecurity legends!🚀. We 💜 the alignment with our amazing investo….

Every once in a while I come across a new start-up with an innovative product and founders that excite and impress me. Founders working crazy hard to solve a big and important cybersecurity problem. If you're into MDR, @wirespeed_ is a must follow.

For some reason, buying or selling a house requires more paper than buying or selling a company for hundreds of millions. Our legal system is weird.

If you can do this, you’ll be ahead of 99% of everyone. And do us all a favor, make sure your website says the things!.

2) Refine your ability to clearly, concisely, and plainly explain your solution to the problem and why it’ll make an impact. Make it so obvious and compelling that someone hearing it for the first time immediately gets why it matters and why it’s worth betting on.

1) Be able to clearly, concisely, and plainly explain the exact problem you’re solving—because if you can’t explain it, you don’t understand it, and no one else will either.

In my experience, the first two and most important pro tip(s) for every start-up founder….

In a market heavily hyped by AI, AI, and more AI. it's striking that the RSAC winner (@pdiscoveryio) is from vulnerability management with little to know mention of AI. Take note. Congrats.

RT @getsquarex: We had a great Day 2 at RSA and gearing up for an even bigger Day 3 today!. We’ve got a packed schedule ahead—including our….

The cybersecurity auditor is the only adversary everyone agrees on. First hear from this one from @wendynather.

Cybersecurity thought experiment I've run with many defenders: . If you had 2x the budget, what would you buy or do first? . If you had 1/2 the budget, what would you eliminate or stop doing first?. The answers are often fascinating.

Web browsers developed by advertisers and AI companies will forever have an conflict of interest with their user's security and privacy. Personally, I've been a fan of @brave for years since day 1.

In cybersecurity, measuring what works is tough. But measuring what doesn’t work? That’s even tougher. Many vendors, and analysts, rely upon this fact.

1 more. I'm suspicious that the cost of certain types of cybersecurity controls exceed the estimated cost of breaches over a given timeframe. For this reason, Im thinking it's possible that many cybersecurity submarkets can be disrupted by cheaper, faster, easier alternatives.