The CyAN Blog – Cybersecurity Advisors Network

10/11/2026

PHP2Shell: When the Patch Clock Ran Out Before It Started

PHP2Shell drew attacks before it was even disclosed. Eight lessons for boards on runtime blind spots, patch speed and supplier risk.

The CyAN Blog

by Kamran Israr Mirza (Kim)

12/10/2026

Meet our new Secretary General

We are pleased to announce the appointment of Aahil Sheikh as our new Secretary General. As CyAN aims to strengthen and protect the global digital society and the information economy, Aahil brings his experience in digital policy across the EMEA and APAC regions. He has …

CyAN News, The CyAN Blog

by Cyan Staff

22/09/2026

VARA: Dubai’s Virtual Assets Regulatory Authority

A board-level briefing on Dubai’s VARA regime, covering licensing, AML/CFT controls,enforcement actions and the compliance gaps that ISO 27001,

The CyAN Blog

by Kamran (Kim) Mirza

25/08/2026

Pakistan’s New Compliance Stack: A CISO Advisory Perspective for Financial Institutions

Pakistan’s financial sector is absorbing five regulatory regimes at once, Cyber Shield, PISF 2026, PVARA, the Pakistan Digital Authority, and emerging data protection law, mapped with diagrams, comparison tables, and a 180-day action plan by an advisor with 20+ years of GCC Central Bank experience.

The CyAN Blog

by Cyan Staff

13/08/2026

Stablecoin and Crypto Asset Wallet Types: Custody and Security Requirements

Wallet architecture and key custody are now the highest-stakes control domain in digital assets. This paper maps the five wallet classes, four custody models, and governance requirements under PCI DSS, ISO/IEC 27001, ISO/IEC 42001, NIST CSF, and the EU AI Act.

The CyAN Blog

by Cyan Staff

04/08/2026

Applications now closed for CyAN’s Mentorship Programme, Autumn 2026

Note: applications are now closed CyAN’s mentorship programme is back for its autumn 2026 cohort, running from mid-September to mid-December. The programme is free and volunteer-led. It pairs people building a career in cybersecurity, or a related field, with experienced CyAN members for three months …

The CyAN Blog

by Cyan Staff

04/08/2026

CyAN Signs Protect.ngo / ICSC Call to Protect Civil Society Organisations

CyAN supports the call to strengthen organisations protecting societal resilience.

The CyAN Blog

by John Salomon

27/07/2026

Governing Security When the CISO Advises but Doesn’t Command – by Kamran Israr Mirza (Kim)

When the SOC reports to the CTO and the CISO’s role is advisory only, accountability and authority quietly split apart; this white paper makes the case for elevating the CISO’s reporting line to the CEO or Board and giving the function its own budget.

The CyAN Blog

by Cyan Staff