John Wilson, Senior Fellow, Threat Research at Fortra, authored an article for The AI Journal examining the security implications of OpenAI’s Sora 2. The piece looks at how increasingly realistic AI-generated video changes the threat landscape, particularly around deepfakes, social engineering, and the misuse of personal likenesses. 

Tyler Reguly, Associate Director of Security R&D at Fortra, was quoted in a CSO article examining Microsoft’s January 2026 Patch Tuesday, which includes an actively exploited zero-day and several critical vulnerabilities affecting Windows, Office, and SharePoint.

In Security Boulevard, Tyler Reguly explains why the goal of patching every vulnerability is not just unrealistic but counterproductive. Drawing on more than two decades in vulnerability management, he argues that security teams need to stop chasing raw CVE counts and instead focus on risk, context, and asset intelligence to decide what truly matters.Originally published in ​Security Boulevard....

Tyler Reguly, Senior Manager of Security R&D at Fortra, was featured in a CSO article examining how security teams can adapt to the surge in vulnerabilities. He explains why public data remains a valuable tool for guiding risk-based strategies.Originally published in ​CSO.​Excerpt: ​“The reality is that public sources of intelligence are critical to managing your vulnerabilities,” Reguly argues. ...

Tyler Reguly was quoted in a CSO article on Microsoft’s August Patch Tuesday updates.

Rohit Dhamankar, Fortra’s vice president of product strategy, sits down with CyberRisk TV at Black Hat 2025 to examine how offensive security is shifting from periodic pen tests to continuous, AI-assisted approaches that provide measurable proof of defensive effectiveness.

Fortra’s Tyler Reguly offered insights on steps companies can take to reduce risk and pointed out a gap in Microsoft’s guidance that could lead to confusion.

Microsoft’s June Patch Tuesday brings attention to several critical threats, including four unpatched vulnerabilities in Microsoft Office. In a new CSO article, Fortra’s Tyler Reguly weighs in on what these issues mean for security teams and how to prioritize the most urgent threats.

Tyler Reguly, Associate Director of Security R&D at Fortra, was quoted in a new Computerworld article on Microsoft’s out-of-band updates for a serious Windows 11 startup issue.

William Snowden was recently featured on Vizo Financial’s Financial Minds: Meet the Experts podcast to talk about the importance of vulnerability scanning and penetration testing for credit unions.

Dark Reading reports that with PCI DSS 4.0.1 now in effect, merchants can no longer assume third-party service providers carry the full burden of compliance.

Ransomware-as-a-service (RaaS) groups continue to evolve, leveraging initial access brokers (IABs), affiliate programs, and dark web marketplaces to increase the scale and success of their attacks.

In an article for Cybersecurity Insiders, Nick Oram explores how doxing, credential leaks, and PII exposure put executives at risk.

Fortra’s Nick Oram spoke with The Register about the latest ransomware group, Ox Thief, and its aggressive new tactics.

Fortra’s Tyler Reguly explores the essential security measures that should be at the foundation of every cybersecurity strategy in 2025.

Healthcare organizations are under mounting cyber threats, but regulatory frameworks like Abu Dhabi’s Healthcare Information and Cyber Security (ADHICS) Strategy are paving the way for stronger protections.

In a recent Forbes article, Nick Oram shares how the evolution of executive security threats now includes dark web exploitation and overlooked mail-based vulnerabilities.

Microsoft's latest Patch Tuesday brings 57 fixes, including six actively exploited zero-days.

Compliance frameworks like ISO 27001 and SOC 2 provide structured guidelines, but they don’t automatically equate to strong cybersecurity.

In an article for The Daily Upside, Mieng Lim discusses the biggest security gaps businesses face.