In Security Boulevard, Tyler Reguly explains why the goal of patching every vulnerability is not just unrealistic but counterproductive. Drawing on more than two decades in vulnerability management, he argues that security teams need to stop chasing raw CVE counts and instead focus on risk, context, and asset intelligence to decide what truly matters.Originally published in ​Security Boulevard....

National cybersecurity policies are essential but difficult to implement at the pace modern threats demand. In Manufacturing.net, John Grancarich examines how government frameworks have improved security posture, where they struggle in real-world application, and why private sector vendors play a critical role in closing the gap between policy and practice.Originally published in ​Manufacturing...

FIRE team research on the Scripted Sparrow BEC operation was covered in Cyber Security News, highlighting how the group uses automation to generate and send attack messages at scale.

Fortra experts Josh Taylor and John Grancarich share perspectives on how AI will reshape security operations, accountability, and incident response as agentic systems become more embedded in enterprise environments.

John Grancarich, Chief Strategy Officer at Fortra, shared his 2026 cybersecurity outlook in VM Blog's 18th annual predictions series, outlining why Data Security Posture Management (DSPM) will become core infrastructure for modern data protection. He explains how DSPM solutions fill visibility gaps across cloud, SaaS, and AI environments, works upstream of traditional tools like DLP and IAM, and...

Cobalt Strike is featured in IT Security Guru’s overview of the best red teaming tools for 2026.

Lane Thames was interviewed for a Communications of the ACM article examining the risks and realities of zero-day exploits. The piece looks at why these vulnerabilities are so difficult to detect, how attackers take advantage of the time gap before fixes are available, and what security teams can do to better prepare for the unknown.Originally published in ​Communications of the ACM.​Excerpt: ​...

Information Week covered the critical first steps leaders should take after a ransomware attack and included insights from Chris Reffkin, Fortra’s Chief Security and Risk Officer.

Microsoft issued its final Patch Tuesday update of the year, and Dark Reading included insights from Tyler Reguly on one of the vulnerabilities already seeing real-world exploitation.

Passwords have been the cornerstone of digital identity for decades, but their weaknesses are well known. The industry is moving toward passkeys, which promise faster, phishing-resistant logins and fewer account takeovers. However, as Alex Bamgboye explains, eliminating passwords entirely introduces new risks. Recovery becomes the real challenge. Without a portable fallback, users can lose control...

The holiday season brings more than festive cheer. It also brings a surge in scams powered by AI. Moonlock spoke with John Wilson, Senior Fellow and Threat Research at Fortra, about how cybercriminals are creating convincing fake ecommerce sites, social media ads, and even job offers. Wilson explains that attackers are exploiting gift cards, travel deals, and short-lived coupon sites to trick...

Digital IT News has published its annual security outlook for 2026, spotlighting the challenges and priorities shaping the year ahead.

Cary Hudgins, VP of Product Management at Fortra, appeared on Richmond Advisory Group’s Cyber Sidekicks podcast to discuss the growing complexity of data security.

Security Boulevard has recognized Fortra as one of the Top 9 DMARC Providers in 2025.

MSN recently featured John Wilson, Senior Fellow, Threat Research at Fortra, in an in-depth article about the surge in digital scams targeting retirees.

Microsoft’s Signal Magazine published a feature on the coordinated effort to reduce cracked Cobalt Strike activity used in major ransomware operations.

Fortra’s CEO Matt Reck spoke with Cybersecurity Insiders about the launch of Fortra’s Data Security Posture Management platform and why a posture-centric model is essential as AI and distributed systems accelerate data sprawl.

CSO published an in-depth look at November's Patch Tuesday release, covering updates across Microsoft, SAP, Adobe, and Mozilla. The article features perspective from Tyler Reguly and explores how organizations can approach this month's wide range of fixes and emerging considerations.Originally published in ​CSO.​Excerpt: ​”Tyler Reguly, associate director of R&D at Fortra, was drawn to CVE-2025...

Fortra’s Chief Strategy Officer John Grancarich was featured in TechNadu discussing how Data Security Posture Management (DSPM) is transforming data protection strategies.Originally published in ​TechNadu.​Excerpt: ​I often come back to the fundamentals, and here I think the fundamental idea is quite simple: you can’t protect what you can’t see. Most organizations still lack full visibility into...

Fortra’s new Data Security Posture Management (DSPM) platform was featured in Cyber Technology Insights. The article explores how the solution closes critical data visibility and protection gaps across hybrid and multi-cloud environments. CEO Matt Reck and Chief Strategy Officer John Grancarich discuss how Fortra’s DSPM advances proactive, intelligence-driven data security.Originally published in ...