We recently sat down with Myriam Abiaad, BISO at Sky, to explore her journey from “cyber born and bred” technologist to leading BISO, and to understand how this evolving role is reshaping the relationship between security and the business. We discussed subjects including the BISO as a bridge between cyber and the business, why chasing zero risk can undermine real security outcomes, and how...

Examining the Silent Ransom Group, a financially motivated cybercrime gang that has been stealing data from companies and demanding payment.

Hackers have been hijacking Instagram accounts at scale by exploiting Meta's AI support chatbot. And, as if that weren't bad enough, the technique required no technical skill whatsoever.When we think about accounts being taken over, we often imagine something of at least some level of sophistication: a credential stuffing attack, a phishing campaign, a SIM-swap, or call center workers being bribed...

Business email compromise is a form of phishing that involves social engineering to masquerade as executives for personal gain.

For almost 20 years, stolen credentials have been the most common route for attackers into organizations, according to the Verizon Data Breach Investigations Report (DBIR). But that's no longer the case.According to the newly published 2026 report, exploitation of vulnerabilities has overtaken credential theft as the leading vector for hackers to gain their initial access — accounting for 31% of...

Goher Mohammad’s path into cybersecurity may feel familiar, and for good reason. Starting in IT, then moving into risk and compliance before stepping into security leadership, his journey followed the same path that played out in the industry. We recently spoke with Goher about how the CISO role is evolving, what it takes to lead through an incident, and the challenges of securing organizations...