CrowdStrike Global IT Outage: Time to Reflect on the Process for Security Vendor Updates?

Following DDoS and wiper malware attacks on Ukrainian government and bank targets, NetSPI outlines four proactive steps, from assessing your security posture to following CISA's Shields Up guidance.

Q&A with Splunk advisory CISO Doug Brush on why incident response evolves slowly, how SolarWinds-style TTPs are nothing new, and why cybersecurity mental health needs top-down prioritization.

Breaches take 279 days on average to identify and contain; incident response improves when teams map applications, infrastructure, and business processes so alerts carry business context.

West Monroe's Sean Curran discusses how COVID-19 exposed weak disaster recovery and business continuity plans, why cyberattacks surge during crises, and why security is everyone's responsibility.

Examines why incident response plans that audit cleanly fail in practice: one-off training, tabletop exercises without real pressure, and responders not cut out for 3 a.m. containment.

Semperis argues that testing backups under ideal conditions creates only an illusion of resilience; real cyber resilience is about staying recoverable when the plan fails and the assumptions behind it collapse.