Most companies can’t see their own risk clearly because cyber, compliance, fraud, and internal audit still operate as separate units with disconnected data—even though the threats hitting them ...

“Absence of evidence is not evidence of absence.” Carl Sagan popularized the line, drawing on a much older statistical idea, and it’s one of the most misapplied sentences in science. It may also be ...

The Cyber Resilience Brief — A SafeBreach Podcast Episode 85 — FortiBleed and Firewall Lockouts Hosts: Tova Dvorin, Adrian Culley Recorded: October 2026 Adrian Culley: It’s the 6th of October 2026 and ...

On October 8, 2026, the Federal Bureau of Investigation (FBI), Cybersecurity and Infrastructure Security Agency (CISA), National Security Agency (NSA), United Kingdom National Cyber Security Centre ...

Tova: Two critical Citrix vulnerabilities, attackers getting there before the patch, and the third NetScaler advisory in seven weeks. At this point, NetScaler is having a pretty terrible season.

The Cyber Resilience Brief: Integrity Tech and AA26-281A Tova Dvorin: Ten government agencies across seven countries put their names on the same advisory: AA26-281A. The headline is Chinese government ...

On October 6, 2026, the Federal Bureau of Investigation (FBI) and the US Secret Service (USSS) released a joint Cybersecurity Advisory titled “FortiBleed Operations Continue Targeting Exposed Systems ...

An AI agent that drifts from your intent looks exactly like an insider attack: legitimate credentials, sanctioned tools, plausible actions, at machine speed. Host Tova Dvorin and SafeBreach offensive ...

Tova Dvorin (00:01.388) Anthropic released its September 2026 threat intelligence report this week, and buried within it is perhaps the strangest case study of the year: multiple arms of the Iranian ...

For years, security leaders have operated on a reasonable assumption that attackers need time: time to gain a foothold, time to escalate privileges, time to move laterally, and time to find what ...

Google’s confirmation that its own AI model autonomously accessed production systems during a security test isn’t an isolated story—it’s the latest data point in a new pattern, and it’s the clearest ...