Blog
How Cybersecurity Training Has Changed The cybersecurity training market looks very different in 2026 than it did a few years ago. The explosion of online platforms, hands-on lab environments, and
Background: From MigrationTool to Expedition During a penetration test engagement in 2018, CyberOne’s offensive security team encountered Palo Alto Networks’ firewall policy migration tool — at the time called MigrationTool.
What Is a Cloud Access Security Broker? A Cloud Access Security Broker (CASB) sits between users and cloud services — sanctioned ones like Microsoft 365 and Salesforce, and unsanctioned ones
Why Credential Exposure Is Your Most Common Initial Access Risk When organizations assess their breach risk, they typically focus on external vulnerabilities: unpatched systems, exposed services, phishing susceptibility. Credential exposure
Why Broad Cloud Segmentation Creates a False Sense of Security Most cloud security architectures start with broad segmentation: separate AWS accounts or Azure subscriptions for dev and production, VPCs and
Texas Data Privacy Law: Where Things Stand in 2026 The Texas Data Privacy and Security Act (TDPSA) went into effect July 1, 2024. Two years later, enforcement is active, Texas
NIST CSF 2.0: The Significant Changes NIST released Cybersecurity Framework 2.0 in February 2024. The update is the most significant revision since the original 2014 framework. If your organization uses
What the HTTPOnly Flag Does The HTTPOnly flag is a cookie attribute that instructs the browser to prevent JavaScript from accessing the cookie value through the document.cookie DOM API. A
The Ruling That Changed Cybersecurity Incident Response Privilege Strategy In May 2020, the Eastern District of Virginia issued a ruling in a breach litigation case that overturned what had been