March 10, 2026
Beyond the buzzword Zero Trust has been marketed heavily enough that many people assume it is a product you buy. It is not. It is a […]
February 25, 2026
A plan you have never tested is a hypothesis Many organizations have an incident response plan filed away, and assume that is enough. Then a real […]
February 18, 2026
The cloud rarely fails; the settings do Most cloud incidents we investigate do not come from an exotic exploit. They come from a setting that was […]
February 11, 2026
Canada is formalizing cyber expectations The progress of Bill C-8, An Act respecting cyber security, which includes the Critical Cyber Systems Protection Act (CCSPA), marks a […]
January 28, 2026
MFA is necessary, but the type matters Multi-factor authentication is one of the highest-value controls you can deploy, and turning it on is genuinely a win. […]
January 22, 2026
A national bet on AI, and what it asks of defenders The Prime Minister’s launch of the “AI for All” initiative signals that artificial intelligence is […]
January 14, 2026
Readiness beats prevention alone Prevention still matters, but the organizations that recover well from ransomware are the ones that planned for the bad day before it […]
December 17, 2025
As 2025 closed, AI governance shifted from an abstract debate to a concrete organizational requirement. Regulators moved, notably with the phased rollout of the European Union […]
December 10, 2025
Every year the pattern repeats, and 2025 was no exception: threat actors time major intrusions and ransomware deployments for holidays, long weekends, and year-end, precisely when […]