Dan Spiner

Outcomes matter — especially when your cybersecurity stack is a patchwork of tools that don’t talk to each other. Integration challenges can derail even the best tech investments. Success lies in making the ecosystem work together, not just buying best-of-breed products. ACPL SystemsViraat Bindraश्री Madhusudhan Kohli 🇮🇳Sukhpal Singh Sandhu, CISSP, CDPSE

56

5 Comments

Hardening Guidelines for SMBs Discover the business value of hardening guidelines in the Identify and Protect stages of NIST CSF. Learn how CIS Control Baselines and NIST STIGs can enhance your SMB's security posture. https://lnkd.in/eGfS-uKw

5

Most AI cyber companies are just LLM wrappers. These benchmarks will get better faster than those wrappers can turn into actual moats.. which means we’re going to finally see a reckoning Building a successful, *durable* AI Cyber companies is incredibly hard: 1. You need to hire a critical mass of domain experts 2. You need to surround those experts with the right people that can build and lunch a product 3. You need a data moat that compounds in value 4. You need to develop a repeatable sales motion that can be easily taught to sellers and partners 5. You need to build a distribution channel that has last-mile relationships to help find and close deals 6. You need to not run out of money while doing 1-5 🤣 There are a bunch of cyber “unicorns” that are really just llm wrappers with a few “friends and family” customers that helped show early traction. Some of those companies are backed by investors that are trying to “king make”. That’s hype… that’s not durable … The reality is a security analyst in the Midwest, south east, or abroad could care less who invested in your company. They just want a product that works, is easy to use, and makes their lives easier so they can get back home to their families #venturecapital #founders #cybersecurity #ai

125

12 Comments

👀 Think that “unsubscribe” button is harmless? Think again. Charles Henderson EVP, Cyber Security Services Coalfire gives expert insight in The Wall Street Journal aritcle on how unsubscribe links are being weaponized to confirm targets, and compromise inboxes. 📖 Read Now: https://ow.ly/NRhp50WaUi7 #CyberRisk #EmailSecurity #Cybersecurity #WSJ #CyberNews

28

1 Comment

Online survey scams are becoming more sophisticated, targeting individuals with promises of fast cash and minimal effort. To protect yourself and your organization: • Avoid surveys offering unusually high payouts • Never provide sensitive information like bank details or SSNs • Verify the legitimacy of the company, website, and privacy policy • Be cautious of urgent or high-pressure sign-up tactics Staying vigilant helps safeguard both personal data and workplace security. https://lnkd.in/epg6yX2h #CyberSecurity #FraudPrevention #DataProtection #ScamAwareness

11

"Despite advancements in prioritization and visibility, remediation processes remain a persistent challenge. While UVM (Unified Vuln Mgmt) solutions can initiate and monitor workflows for vulnerability notification, patch management, and remediation actions, they cannot fix broken processes on their own. Organizations still require strong patch management practices and active commitment from remediation owners—including IT, cloud, and development teams—to reduce exposure risks effectively." by Erik Nost / Forrester #patchmanagement #vulnerabilitymanagement #UVM

9

How to get a good location for your booth at a cyber conference. (My top tips for succeeding in cybersecurity conferences - Pt 1) 𝘞𝘦 𝘥𝘪𝘥 𝘢 𝘵𝘰𝘯 𝘰𝘧 𝘵𝘩𝘦𝘴𝘦, 𝘭𝘦𝘵 𝘮𝘦 𝘬𝘯𝘰𝘸 𝘪𝘧 𝘺𝘰𝘶 𝘭𝘪𝘬𝘦 𝘵𝘩𝘦𝘮!

88

26 Comments

Tenable is releasing a number of enhancements to the Vulnerability Priority Rating (VPR), including enriched threat intelligence, AI-driven insights and explainability, and contextual metadata. Learn how the improved prioritization effectiveness of the enhanced VPR compares to other common prioritization strategies. http://ow.ly/Nk5N106gMXO

5

Go Seal Security! Seal Security just raised $13M Series A to fix open source vulnerabilities at scale, without version upgrades, rewrites, or production downtime - This isn’t AppSec noise. It’s remediation that works. Backed by Vertex Ventures Israel (Tami Bronner), CCL, Crew Capital, SBI Investment and others, Seal is becoming the go-to layer for securing modern codebases, containers, and even legacy systems. The market is shifting from detection to action. Seal is already there. Well done Itamar Sher, Alon Navon, Lev Pachmanov and the team! https://lnkd.in/ePhqeNJW

115

1 Comment

Great discussion last night with the Dune Security team at Cooley LLP's offices on enterprise deepfake defense. Reality Defender and Dune Security partnered this fall to deliver comprehensive protection against AI-generated media threats. Our collaboration creates a multi-layered defense strategy: Reality Defender's detection models identify and block synthetic voice, image, video, and text content at communication entry points, while Dune Security strengthens the human layer through deepfake simulations, behavioral risk scoring, and targeted employee training. This approach addresses both technical and human vulnerabilities. Our integrations stop the majority of threats before they reach employees, and Dune Security ensures your workforce can recognize and respond to sophisticated attacks that get through. The result is enterprise-grade deepfake security that scales across organizations of any size. Looking forward to more events like this and continuing our partnership with the Dune team.

73

The only Identity Platform for every type of identity, in every environment...Including AI. "Identity threat detection and response startup Permiso Security Inc. today announced an expansion of its platform to include protection for artificial intelligence identities, including users, builders and agents, to give enterprises a single platform to protect all digital identities against cybersecurity threats."

25

1 Comment

The Boston Capital Holdings data breach underscores a critical vulnerability in corporate cybersecurity strategies. In January 2026, Boston Capital Holdings experienced unauthorized access to its network, compromising sensitive personal information of 132 Maine residents. The breach was facilitated by exploiting cloud systems of other companies, highlighting the need for a comprehensive, multi-layered security approach. This incident serves as a stark reminder for senior executives to reassess and fortify their organizations' cybersecurity frameworks to mitigate evolving threats. Engage with your cybersecurity teams to conduct a thorough risk assessment and implement robust security measures. https://lnkd.in/eDU634-3 ##CybersecurityLeadership ##DataBreachResponse ##ExecutiveStrategy

6

1 Comment

First and foremost, respect to the Authors and to the Atlantic council for their ongoing efforts to improve visibility into the Offensive Cyber Capabilities (OCC) industry. Commendable as it is, this recent attempt to dissect the market function of “Intermediaries” in the proliferation of OCC’s and to propose policy guidelines, has three major weaknesses: 1.       The study never builds a stable boundary between **originators/builders** and **intermediaries/transfer agents**. That distinction is foundational to how the market actually works. It should be pretty clear: brokers and (some) resellers are NOT the technical authors of the equities they provide. They simply move capabilties from builder to consumer for a fee. 2.        The paper says intermediaries both “drive proliferation” and “Limit proliferation”. That’s a shaky argument tryin to show there is positive market role for intermediaries. In fact, there is no positive side. Increased prices, less product diversity, and weaker transparency - which the authors assume as proliferation inhibitors - may not only coexist with, but drive proliferation. Plenty of consumers willing to pay top-dollar for whatever is offered and the less transparent the better.   3.       There are a lot of anecdotal claims made in order to establish general conclusions on market mechanics. For example, the “broker markup” discussion is very speculative, and the numbers thrown around are for from market norms. Another example, the conclusion drawn from the recent Memento Labs case is also wrong. Control of the product was lost after delivery to an end user; brokers, resellers, or intermediaries were never involved.     Overall, the study is useful as a mapping exercise. However, analytically it feels more like a scoping paper trying to describe an evasive participant in the OCC’s ecosystem. Intermediaries – particularly brokers – have no positive contribution to market dynamics. Supply and demand should be able to interact directly with clear guardrails and regulatory guidelines. Simple, transparent and effective.   

11

Build vs. Buy: The $1-7M annual question that determines your strategic positioning for the next decade. 🎯 Arctic Wolf built proprietary platforms and attracted $45M in Series C funding. They now partner with 1,500+ MSPs globally. But here's what happened next: Their recent $160M acquisition of BlackBerry Cylance proves that even successful platform builders eventually need to ACQUIRE capabilities rather than develop them internally. THE FINANCIAL REALITY: 💵 Custom platform development: $1-7M annually ⏰ Time to competitive parity: 3-5 years ⚠️ Risk of obsolescence: HIGH 📊 Probability of out-executing vendors: LOW MEANWHILE, COMMERCIAL PLATFORMS OFFER: ✅ Proven track records ✅ Continuous innovation ✅ Extensive integrations ✅ Established support infrastructure ✅ Reduced execution risk ✅ Rapid scaling capability Proprietary platforms remain viable for well-capitalized MSSPs seeking premium positions. Companies like Arctic Wolf, Red Canary, and Expel demonstrate how technology differentiation creates competitive moats. But survivorship bias obscures the failures that OUTNUMBER the victories. 😬 PLATFORM DECISIONS ULTIMATELY REFLECT STRATEGIC INTENT, NOT TECHNICAL PREFERENCES. The question isn't "build or buy"—it's "can you afford to build, and should you?" Get the complete build vs. buy framework → www.nearshorecyber.com.mx #BuildVsBuy #CyberStrategy #PlatformDecisions #SecurityInvestment #TechnologyStrategy #MSSPGrowth #CyberInnovation #StrategicPlanning #VendorManagement #SecurityLeadership

3

Phishing emails don’t just steal data – they erode trust. And once your business reputation is damaged, no software patch can fix it. The real defense? Proactive cybersecurity that goes beyond the basics. Read how one small business owner learned the hard way, and why prevention matters more than ever. https://lnkd.in/e7sYzZJV

5

Want to keep your small business protected? Here are the top 5 trends in cybersecurity to keep in mind for 2026.

3

Reg S-P is moving from “policy on paper” to operational readiness. For smaller RIAs and broker-dealers, the June 3 deadline is coming fast. And from the conversations we’re having, many firms are still working through what readiness actually means. It’s not just having an incident response plan. Firms need a written and implemented incident response program, clear breach detection and escalation procedures, 30-day notification workflows, vendor oversight, contract review, and records that can stand up in an exam. The added pressure: examiners have already been asking these questions of larger firms, so smaller firms should expect a more informed review process. At SurgeONE, we help firms assess where they stand, tighten the gaps, document the process, and put practical Reg S-P workflows in place with both technology and experienced compliance support. If you’re unsure where your firm stands on Reg S-P readiness, get in touch. It’s better to find the gaps before an examiner does. https://lnkd.in/e9vbXdbP

12

Agentic AI is helping SOCs triage alerts 60% faster, turning overwhelming alert volumes into manageable tasks. One company went from reviewing 8% of tickets to 100%. This isn't just an IT upgrade; it's a business advantage. https://lnkd.in/gfvT3i2n Is your SOC using AI to get ahead, or are your analysts still drowning in data?

1

🔐 Is your #PKI stuck in the past? Legacy PKI setups, manual cert tracking, and ad-hoc policies pose serious risks in today’s fast-moving digital world. Discover how the PKI Maturity Model from the PKI Consortium helps you assess, benchmark, and upgrade your PKI strategy across #governance, #automation, and more. This blog breaks down the 5 maturity levels and the 4 key modules that determine where your PKI stands—and what needs fixing. ⬇️

2