Recent Posts

Disinformation and AI – a Growing Challenge

Disinformation and AI – a Growing Challenge

I recently had the pleasure of joining Dr. Egor Zakharov of the AIT Lab at the Swiss Federal Polytechnic University, Zurich (ETHZ) for a fireside chat at the ITBN conference in Budapest, Hungary. Egor is an accomplished researcher and author on the topic of AI-generated 

New Secure-in-Mind Videos/Podcasts!

We’ve added a number of great new episodes to our Secure-in-Mind podcast/video interview series: Florian Hantke, PhD candidate at CISPA Helmholtz in Germany and CyAN mentorship programme participant, on pen testing and vulnerability research Remy Bertot, founder & CTO as Passbolt, on privacy, encryption, and 

The Tale of Two Approaches to Artificial Intelligence – EU AI Act & U.S. Executive Order on Safe, Secure, and Trustworthy AI

Artificial Intelligence (AI) is one of the most powerful and transformative technologies of our time and it also poses significant challenges and risks for safety, security, human rights, and democracy.  How can governments regulate AI to protect the public interest and values while fostering trust 

Enhancing Resilience: The Role of DORA in Business Continuity and Operational Resilience

Enhancing Resilience: The Role of DORA in Business Continuity and Operational Resilience

In today’s regulatory landscape, navigating various regulations related to risk management can be a daunting challenge for financial institutions. However, the Digital Operational Resilience Act (DORA) offers a unique perspective. DORA not only aligns with existing best practices and regulations but also presents opportunities for 

SolarWinds of Change – How the SEC Ruling Affects the Future of InfoSec Officers

Cybersecurity is more than a technical issue as it has legal and financial implications for companies and investors.  The recent U.S. Securities and Exchange Commission (SEC) charges levied against SolarWinds Corporation and its chief information security officer illustrates the serious consequences of failing to disclose 

Article Publication – “Protecting Responsible Cybersecurity Vulnerability Research”

CyAN members John Salomon and Nick Kelly have just published an article in the European Cybersecurity Journal on the legal treatment of responsible cybersecurity vulnerability disclosure.

Please Stop Overva(i)luing Buzzwords

Please Stop Overva(i)luing Buzzwords

An informed rant about how excessive industry focus on currently trendy technologies and terminology harms competitiveness and readiness in the information security world.

Cybersecurity Reinforced: Elevating Patch, Vendor, and Asset Management for Robust Defence Mechanisms

Introduction In a world where cybersecurity threats are not a matter of ‘if’ but ‘when’, the resilience of an organization’s defence mechanisms is paramount. While instances like the Cisco zero-day vulnerability serve as a reminder of the pervasive threats, they also underscore the need for 

Strengthening Organisational Resilience: A Comprehensive Exploration of Cybersecurity Maturity Models

Introduction October, celebrated as Cybersecurity Awareness Month globally, is a critical juncture for organisations to reflect on the escalating cyber threats that relentlessly test our defences. As we navigate an intricate digital landscape, the adoption and implementation of diverse yet complementary cybersecurity maturity models and 

Navigating the 2023 Cyber Landscape: A Comprehensive Guide for the C-Suite

As we delve into the intricacies of Cybersecurity Awareness Month this year, the intricate dance between evolving digital landscapes and complex cybersecurity challenges becomes ever more apparent. For every organization, especially those at the CISO, C-suite, and boardroom levels, the magnifying lens on cybersecurity has