How Cybersecurity Training Has Changed The cybersecurity training market looks very different in 2026 than it did a few years ago. The explosion of online platforms, hands-on lab environments, and […]
CyberOne Security Team
This article was written by members of the CyberOne Security Team, drawing on decades of combined experience in cloud and network security, penetration testing, threat intelligence, and advisory services.
A Commitment to Getting It Right: Palo Alto Networks’ Expedition Migration Tool
Background: From MigrationTool to Expedition During a penetration test engagement in 2018, CyberOne’s offensive security team encountered Palo Alto Networks’ firewall policy migration tool — at the time called MigrationTool. […]
Finding Enterprise Credentials in Data Breaches: How to Detect Exposure
Why Credential Exposure Is Your Most Common Initial Access Risk When organizations assess their breach risk, they typically focus on external vulnerabilities: unpatched systems, exposed services, phishing susceptibility. Credential exposure […]
Interpreting the New Texas Data Privacy Law
Texas Data Privacy Law: Where Things Stand in 2026 The Texas Data Privacy and Security Act (TDPSA) went into effect July 1, 2024. Two years later, enforcement is active, Texas […]
What’s New with NIST 2.0 Cybersecurity Framework?
NIST CSF 2.0: The Significant Changes NIST released Cybersecurity Framework 2.0 in February 2024. The update is the most significant revision since the original 2014 framework. If your organization uses […]
Securing Your Cookies: HTTPOnly Flag for Cookie Theft Defense
What the HTTPOnly Flag Does The HTTPOnly flag is a cookie attribute that instructs the browser to prevent JavaScript from accessing the cookie value through the document.cookie DOM API. A […]
Attorney-Client Privilege and Cybersecurity: What’s Changed and How to Adapt
The Ruling That Changed Cybersecurity Incident Response Privilege Strategy In May 2020, the Eastern District of Virginia issued a ruling in a breach litigation case that overturned what had been […]
Why Your CISO Needs a Seat at the Boardroom Table (Especially in the Age of AI)
In today’s digital age, cybersecurity is no longer just an IT issue, it’s a critical business risk that can impact every aspect of an organization. This is even more true […]
Mitigating Cyber Threats with API Security and Web Application Testing
Many industries have regulatory requirements that mandate regular security assessments to help safeguard sensitive data. Penetration tests are key in this regard. These assessments not only identify and address vulnerabilities, […]
CISOs in the Boardroom: A Strategic Imperative in the Age of Artificial Intelligence
In today’s rapidly evolving digital landscape, cybersecurity is no longer just an IT concern. It’s a critical business risk that demands the attention of the highest levels of leadership. While a […]